In order to enable Account Lockout Analyzer to probe Outlook Web App and ActiveSync-enabled devices as probable cause for an account lockout, you must configure IIS logs on the Exchange server which hosts Client Access Role.
ADAudit Plus can set up these configurations automatically. Run the Account Lockout Analyzer report. If there is an account, which has the caller machine name pointing to an Exchange server, click on it. You will be presented with a pop-up, which contains OWA and ActiveSync tab. In this tab, you will find the link Click here to automatically configure IIS logging options.
By clicking on this link, all the required IIS log settings on Exchange server will be configured automatically.