Failed logon with specific failure reason

Hello

We have 2 Domains in our organization and sometime by mistake some users of the second domain  (applications usualy) -

Of course their logons failed  , because they are from another domains..

Is there any option to make an Expection to the whole domain in this rule (Matching Parameters) ? (Failed logon with specific failure reason(Misspelled or Disabled ))

Something like     "DOMAIN\*"

Thanks in advance