Hello
Thank you for your question and reaching out. I can understand you are having query\issues related to Events 4625 on DC.
This event is logged for any logon failure. here Logon Type= 3 means that PC is trying to connect to shared resources (folders and printers)
It generates on the computer where logon attempt was made, for example, if logon attempt was made on user's workstation, then event will be logged on this workstation.
Please check if there are any mapped folders or shared drives or Task Scheduler on that workstation using old credentials
Reference:
https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4625
--If the reply is helpful, please Upvote and Accept as answer--