It is important in terms of security to monitor logon events on our servers. We can periodically run this PowerShell script to see if there is any suspecious logon attempt. logonFails.ps1