First fix your security. Everyone should have their own profile. You have no accountability for your RVI clients. That will never pass an audit. As for finding out who, well it was you generic RVI user who locked out the account. From where, well that is difficult to determine if you are not logging the IP address within the RVI server.
This mailing list archive is Copyright 1997-2020 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact