Set up centralized logging on Windows Server

# winrm qc
If this computer has VMWare workstation installed, it’s “public network” needs to be changed with this instruction:
# wecutil qc /q
Eventvwr >> right-click Subscriptions node >> Create Subscription >> click Select Computers >> Add Domain Computers >> choose the desired machine(s) >> OK >> Select Events >> choose Event Level as Critical, Warning, Error >> OK >> OK
Client computers:
Install remote management Forwarding (XP/2003 machines:
# winrm qc -q

Leave a Reply

Your email address will not be published. Required fields are marked *