Hmmm. In this case, my next step would be to look in the DC's event log. (Ours is configured to log failed authentication attempts, I suppose yours does this, too)

And, although the last message says "Password Mismatch", theoretically it could be a misspelt username as well, or even a wrong domain.