Logon Event ID ler – Interactive Logon Events Event ID
Description


528
Successful logon.


529
Logon failure. Unknown user name or bad password.


530
Logon failure. Account logon time restriction violation.


531
Logon failure. The account is currently disabled.


532
Logon failure. The specified user account has expired.


533
Logon failure. The user is not allowed to log on at this computer.


534
Logon failure. The user has not been granted

https://www.hakanuzuner.com/logon-event-id-ler-interactive-logon-events/