What is event 4740?
4740: A user account was locked out. The indicated user account was locked out after repeated logon failures due to a bad password. See event ID 4767 for account unlocked. This event is logged both for local SAM accounts and domain accounts.
Where to find event ID 4740?
Open the event log viewer of the DC. Go to the security logs, and search for Event ID 4740.