Why disabled local administrator account on windows trying to authenticate against the Domain Controller

[Windows 10]

I am seeing login failures with disabled "Administrator" account trying to authenticate against the domain controller. I am trying to investigate the source of these login failures. Could any of you please help me in what is causing these login failures. Following is the event details:EventCode: 4625SubjectUserSid: "S-1-0-0"SubjectUserName: "-"SubjectLogonId:"0x0"TargetUserSid:"S-1-0-0"TargetUserName: "Administrator"TargetDomainName:"Device Name""Status": "username or password incorrect""FailureReason": "%%2313""SubStatus":"username does not exist""LogonType": "Network""LogonProcessName":"NtLm

Continue reading...