Does Event Viewer look up usernames on remote systems?

Hi!

I've written a program that reports events to a remote event log,
that is, the PDC's. While doing that, I've gone to considerable
lengths to provide the SID of the current user, so that Event
Viewer will show me the user name.

Now, when I open the log in Event Viewer, sometimes it hangs for
quite a while, and after that, displays some records with SIDs
instead of user names. The program is only ever executed as a
domain user, so there aren't any local SIDs. Also, the SIDs I see
are all equal except for the very last component.

I think (and Ethereal supports me by showing LSA conversations that
have "LookupSid" in them) that this is because Event Viewer does a
LookupAccountSid() on the system that the event was reported from,
which fails with "The RPC server is unavailable" if said system is
down.

If that is true, is there any way to make Event Viewer try to look
up these domain SIDs on the domain controller instead or in
addition to the reporting system?

The PDC is a Windows 2000 SP4 (German), all clients are Windows XP
SP1 (German).

Thanks for your help (and for pointers to more appropriate groups,
if this is the wrong one)!

--
Christian Ullrich