Event Viewer Overload

With EM SQL2000 on an XP pro client, we are getting two entries in the
security log on each server registered every 12 seconds even with audit set
to failure only.   This creates a lot of unnecessary clutter in the logs and
makes them virtually unusable for analysis.  Is there any way to turn off
these entries, but still remain connected through EM?    We do not have the
problem when EM is installed on an NT4 client and permanently connected.