Netlogon Logging
To enable NetLogon Logging, use the following command on a domain controller:
nltest /dbflag:0x2080ffff
When finished, disable NetLogon Logging with this command:
nltest /dbflag:0x0
From <http://tritoneco.com/2013/05/21/troubleshoot-ad-account-lockouts-with-netlogon-logging/>