SIDCloner seems to be depending on NTLMv1

[mashdk]

When NTLMv1 is blocked in the source domain, SIDCloner generates Event 4625 Unknown Username or Bad password, until the service account of SIDCloner is locked out.
With NTLMv1 enabled, this does not happen.