When a down-level client fails a logon attempt, Windows 2000 generates Event Id 681 on the Windows 2000 domain controller. This also can be generated through a trust to a down-level domain
An error code "3221225572" with an event ID 681 is an attempted logon with a misspelled or bad user account.
Verify with your domain administrator the correct user account for accessing the network.
Additional information on Event 681 ID events and error codes follows:
Error code 3221225572 Hex C0000064
Reason
User logon with misspelled or bad user account
Error Code 3221225578 Hex C000006A
Reason
User logon with misspelled or bad password
Error Code 3221225583 Hex C000006F
Reason
User logon outside authorized hours
Error Code 3221225584 Hex C0000070
Reason
User logon from unauthorized workstation
Error Code 3221225585 Hex C0000071
Reason
User logon with expired password
Error Code 3221225586 Hex C0000072
Reason
User logon to account disabled by administrator
Error Code 3221225875 Hex C0000193
Reason
User logon with expired account
Error Code 3221226020 Hex C0000224
Reason
User logon with "Change Password at Next Logon" flagged
Error Code 3221226036 Hex C0000234
Reason
User logon with account locked
