...
Here are some of the more useful "sub" error codes that are returned by Active Directory. (someday I'll find the technet article again and link it)
| code | explanation |
|---|---|
| 525 | user not found |
| 52e | invalid credentials |
| 530 | not permitted to logon at this time |
| 531 | not permitted to logon at this workstation |
| 532 | password expired |
| 533 | account disabled |
| 701 | account expired |
| 773 | user must reset password |
| 775 | user account locked |
...