Event Message:

Logon Failure: Reason: The specified user account has expired User Name: user name Domain: name Logon Type: name Logon Process: parameter Authentication Package: parameter Workstation Name: computer name

Source Event Log Event ID Event Type
Security Security 532 Failure Audit

Explanation:

This event record indicates an attempt to log on to an account that has expired.