Excessive Logon Audit Events

I have a stand alone Windows 2000 server sp4 running SQL 2000 sp3. I need t
o be able to audit successful and failed Logon events and I have the group p
olicy set to do this. The box is in an offsite facility connected by at T1
over a VPN connection. My
SQL developers have the remote server registered in their Enterprise Manager
along with the local SQL servers. When they have Enterprise Manager open,
the following event is logged on the remote SQL server every 10 seconds. It
is filling my log and maki
ng it difficult to read. Why is this happening and can I make it stop?
Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 6/28/2004
Time: 9:01:29 AM
User: NT AUTHORITY\SYSTEM
Computer: CONDOR
Description:
Account Used for Logon by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Account Name:
SomeUser
Workstation:
UserWorkstationIn Enterprise Manager (the devs need to do this on their PC's) goto
Tools>Options and uncheck the Poll Server checkbox. As you will see the
default interval for this polling is 10 seconds.
HTH
Jasper Smith (SQL Server MVP)
http://www.sqldbatips.com
I support PASS - the definitive, global
community for SQL Server professionals -
http://www.sqlpass.org
"Chris Wilkins" <Chris Wilkins@.discussions.microsoft.com> wrote in message
news:2D79110F-901D-43F2-9DA6-1AD0A97CC90F@.microsoft.com...
> I have a stand alone Windows 2000 server sp4 running SQL 2000 sp3. I need
to be able to audit successful and failed Logon events and I have the group
policy set to do this. The box is in an offsite facility connected by at T1
over a VPN connection. My SQL developers have the remote server registered
in their Enterprise Manager along with the local SQL servers. When they
have Enterprise Manager open, the following event is logged on the remote
SQL server every 10 seconds. It is filling my log and making it difficult
to read. Why is this happening and can I make it stop?
> Event Type: Success Audit
> Event Source: Security
> Event Category: Account Logon
> Event ID: 680
> Date: 6/28/2004
> Time: 9:01:29 AM
> User: NT AUTHORITY\SYSTEM
> Computer: CONDOR
> Description:
> Account Used for Logon by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> Account Name:
> SomeUser
> Workstation:
> UserWorkstation
>