Wecutil and WinRM RRS feed

  • Question

  • I have the need to get event logs forwarded to a collector server in a workgroup enviroment.

    The source PC's are Windows XP SP3 and the collector server is Windows7

    I have can get this to work in a domain enviroment I just cant get this to work in a workgroup enviroment

    Source machine configuration

    Run WinRM QC

    Check that the listener are configured with a WinRM e winrm/config/listener. That comes back ok

    Edit GPEDIT to add the subscription manager or collector server in Event Forwarding

    Run a WinRM id and that comes back ok

    Run A WinRM id -r:Collector machine (once that is configured and that comes back ok)

    Collector Machine

    Run WinRM qc

    Run Wecutil qc

    Add the account to the event log readers group.

    Created the subscriptions and they show with a green tick.

    The events just dont seem to get through

    I have seen a few articles where others users have had the same issue with the workgroup enviroment

    Help is appreciated

    Tuesday, April 2, 2013 7:46 AM