Source Initiated Event Forwarding - Access denied errors on source computers
i'm trying setup source-initiated event log forwarding. the collector server 2012 r2, , test machines windows 7. i've followed directions on http://msdn.microsoft.com/en-us/library/windows/desktop/bb870973(v=vs.85).aspx. winrm enabled , configured on our machines gpo, , i'm setting the subscriptionmanager setting on source machines gpo well. and i've created simple subscription on collector gets critical, warning, , error messages application , system logs.
the source computers not connecting though, , can't figure out why. on source computers, in operational log of eventlog-forwardingplugin, see whenever source attempts forward:
event id 105
"the forwarder having problem communicating subscription manager @ address <myserver>. error code 5 , error message <f:wsmanfault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" code="5" machine="<myclient>"><f:message>access denied. </f:message></f:wsmanfault>."
i've yet find on collector. the eventcollector log has no events. i've tried tweaks here , there based on stuff i've found on other sites, nothing working , i'm pretty stumped @ point. if can give me idea of causing access denied error or ways more information out of source/collector machines, i'd appreciate it.
i should note of these machines in same domain.
hi,
please check whether windows remote management (ws-management) service started in both machines.
regards,
gopi
jiji technologies
Windows Server > Management
Comments
Post a Comment