• This sounds more like a SQL Server 2000 dilemma to me. When failed login auditing is turned on in SQL Server 2000, sadly no State information is returned to the error log.