Tracing logon failure

I need to trace the logon process to find why I am getting "Logon
failure: account currently disabled." running

dir \\misha\d__users_misha_trunk_features_am10_p__net_ p

from machine in one domain on the machine in another domain.

What I am hoping to get is a step by step process aimed on
understanding what is happening (i.e what account is beging used to log
in, what is handling the logon request workstation or is it rerouterd
to DC etc.)

Any pointers would be greatly appreciated.

As an engineer I would like to use a straightforward fixed-time
process, and not googling or trying one thing after another to solve
this problem.