Web Figure 1: Event ID 531

Event Type:	Failure Audit
Event Source:	Security
Event Category:	Logon/Logoff
Event ID:	531
Date:		6/18/2003
Time:		10:00:38 AM
User:		NT AUTHORITY\SYSTEM
Computer:	VM1
Description:
Logon Failure:
 	Reason:		Account currently disabled
 	User Name:	bob
 	Domain:		adtest.local
 	Logon Type:	2
 	Logon Process:	seclogon
 	Authentication Package:	Negotiate
 	Workstation Name:	VM1