sudo systemctl restart auditd

sudo su – labuser1

sudo passwd labuser1 # Change password
sudo passwd -l labuser1 # Lock the account

sudo ausearch -k identity_changes