Last night we received approximately 6500 failed login notifications from
the Remote Manager on the server holding our root replica. The failed
logins are all workstations and OU's. Is there a way to trace these failed
logins and prevent or remediate them?

Thanks,