If you happen to be dealing with an older version of NPS for Windows 2008 R2 and can't understand why login failures aren't being logged please be sure to enable this particular audit functionality.
Run the following in a privileged command prompt.
auditpol /set /subcategory:"Network Policy Server" /success:enable /failure:enable