I have the need to get event logs forwarded to a collector server in a workgroup enviroment.
The source PC's are Windows XP SP3 and the collector server is Windows7
I have can get this to work in a domain enviroment I just cant get this to work in a workgroup enviroment
Source machine configuration
Run WinRM QC
Check that the listener are configured with a WinRM e winrm/config/listener. That comes back ok
Edit GPEDIT to add the subscription manager or collector server in Event Forwarding
Run a WinRM id and that comes back ok
Run A WinRM id -r:Collector machine (once that is configured and that comes back ok)
Collector Machine
Run WinRM qc
Run Wecutil qc
Add the account to the event log readers group.
Created the subscriptions and they show with a green tick.
The events just dont seem to get through
I have seen a few articles where others users have had the same issue with the workgroup enviroment
Help is appreciated
