Logon Failed (Unknown Username) event appears in your reports twice for Windows 2000 (4257489)

You may see the event ‘Logon Failed (Unknown Username)’ event in your reports twice for Windows 2000 server. When a ‘Logon Failed (Unknown Username)’ event is raised, the Windows 2000 operating system writes the event to the Windows security log twice. The Active Administrator Service Agent sees the events, but the Service Agent has no way to know that the second event is from the same Logon Failed event.

There are no resolutions to this problem because it is a limitation of the Microsoft Windows 2000 operating system and the Active Administrator Service Agent.