Does anyone know how to turn just these events OFF without turning off Logon Failure Auditing? We have a mixed NT4/2000 environment….but are unable to ascertain source(s) of thousands of these events….