Deploiement_Server/deployment-apps/splunk_wineventcode_secanalysis/lookups/logon_failure_lookup.csv

1	Error_Code	Failure Reason
2	0xC000005E	There are currently no logon servers available to service the logon request.
3	0xC0000064	User logon with misspelled or bad user account.
4	0xC000006A	User logon with misspelled or bad password.
5	0xC000006D	This is either due to a bad username or authentication information.
6	0xC000006E	Unknown user name or bad password.
7	0xC000006F	User logon outside authorized hours.
8	0xC0000070	User logon from unauthorized workstation.
9	0xC0000071	User logon with expired password.
10	0xC0000072	User logon to account disabled by administrator.
11	0xC00000DC	Indicates the Sam Server was in the wrong state to perform the desired operation.
12	0xC0000133	Clocks between DC and other computer too far out of sync.
13	0xC000015B	The user has not been granted the requested logon type (aka logon right) at this machine.
14	0xC000018C	The logon request failed because the trust relationship between the primary domain and the trusted domain failed.
15	0xC0000193	User logon with expired account.
16	0xC0000224	User is required to change password at next logon.
17	0xC0000225	Evidently a bug in Windows and not a risk.
18	0xC0000234	User logon with account locked.
19	0xC00002EE	Failure Reason: An Error occurred during Logon.
20	0x0	Status OK.