Event Message:

Logon Failure: Reason: Account currently disabled User Name: user name Domain: name Logon Type: name Logon Process: parameter Authentication Package: parameter Workstation Name: computer name

Source

Event Log

Event ID

Event Type

Security

Security

531

Failure Audit

Explanation:

This event record indicates an attempt to log on using a disabled account.