Thank you for reaching us
PRTG can monitor the login attempts on different servers as long as they support this kind of monitoring.
What server are you interested in monitoring?
Some of our costumers like to monitor their DCs
Here are some examples
Regarding your second question. There is no easy way to do this, as there are some limitations of what PRTG can notify you about just as mentioned in the KB articles.
Regarding the notification time, I guess you could play with schedules.
Here is a crazy idea.
You can have two Event Viewer sensors ( just as described in the KB articles I shared) monitoring the same target. Give the sensor a meaningful name, for example, PRTG web server login failed working hours. For the second one, do the same, but make sure to include "non-working hours".
Create 2 notification templates, with 2 different schedules,(https://www.paessler.com/manuals/prtg/schedules_settings)
One for working hours, and the second one for non-working hours.
Assign these notification templates to the triggers for each sensor accordingly. Both of the sensors will be actively monitoring the target at the same time, but just one will be sending notifications depending on the schedule assigned on the notification template for each sensor.
I hope this makes sense.