| Event Id | 535 |
| Source | Security |
| Description | Logon Failure: Reason: The specified accounts password has expired User Name:<User Name> Domain: <Domain> Logon Type:<Logon Type> Logon Process: <Logon Process> Authentication Package: <Authentication Package> Workstation Name: <Workstation Name> |
| Event Information | According to Microsoft : Cause : The logon attempt failed because the user account password that was used to log on has expired. This restriction is configured on the user account on the local computer or on the domain Resolution: Check to see that the password was reset. |
| Reference Links | Alternate Event ID in Vista and Windows Server 2008 is 4625. Tracking Logon and Logoff Activity in Windows 2000 (Article) |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.