Account For Which Logon Failed: Security ID: NULL SID Account Name: Username Account Domain: tailspintoys.local
Failure Information: Failure Reason: User not allowed to logon at this computer. Status: 0xc000006e Sub Status: 0xc0000070
Process Information: Caller Process ID: 0x3f0 Caller Process Name: C:\Windows\System32\inetsrv\w3wp.exe
This error can occur If you have set up Log on to restrictions on the user account you are attempting to log in with AND you do not have the SBS server listed as a machine they are allowed to log on to.
Add the SBS server in the Log on to rights on the properties of the user account in AD
RWA will return proper messages for 4 Logon failures: Password has expired, Password Must be changed, Wrong Password, and Account is Disabled. For all other logon failures it will return unknown.