Netlogon Logging

To enable NetLogon Logging, use the following command on a domain controller:   

 nltest /dbflag:0x2080ffff   

 When finished, disable NetLogon Logging with this command:   

 nltest /dbflag:0x0   

   

 From < http://tritoneco.com/2013/05/21/troubleshoot-ad-account-lockouts-with-netlogon-logging/ >