VMware - Check for Failed Authentication
1. Login to VMware Horizon Admin page using privileged account username/password.
2. Select Events from the menu bar on the left-hand side.
3. Click on the Severity title once to sort Audit failures to the top of the list by order of time they occurred.
4. Look for the persons username in the Users column and the message User SCMC\<username> failed to authenticate because of a bad username or password. This will also track the username entered so you can tell if the person is entering a wrong username or password.