This process is if you are gathering the logs from the Virtual Appliance. We will need to know the username and password to the Virtual Appliance itself (ddpuser is the default username and password). This process will also need a third party SFTP client like Filezilla or PSFTP.
Windows 10 Threshold 2 (1511, Build 10.0.10586) Introduces changes in how Microsoft manages cached credentials. There were modifications with the Local Security Authority Subsystem Service (LSASS) that resulted in changes in when it requested cached credentials from the Operating System.