Identify failed logon desktop or device
Enable verbose user account logging in order to determine where failed authentication attempts are originating from. Log into primary domain controller. Enable verbose netlogon logs using command nltest /dbflag:0x2080ffff This …