Event ID 549

Logon Failure:
    Reason:                 All sids were filtered out
    User Name:              %1
    Domain:                 %2
    Logon Type:             %3
    Logon Process:          %4
    Authentication Package: %5
    Workstation Name:       %6