If you were running default trace and have the files, you may be able to see some atcitivity in tempdb. You can look for processes with sort warnings or hash...

It looks like you are passing a domain\windows_acct to what is supposed to be a sql_login

In our shop we do most of our automated monitoring and admin tasks via powershell scripts, run from central admin instances.

This gives you far greater scalability in a large complex...