Set up centralized logging on Windows Server

Server:
# winrm qc
If this computer has VMWare workstation installed, it’s “public network” needs to be changed with this instruction: https://support.microsoft.com/en-us/kb/2578723#LetMeFixItMyselfAlways
# wecutil qc /q
Eventvwr >> right-click Subscriptions node >> Create Subscription >> click Select Computers >> Add Domain Computers >> choose the desired machine(s) >> OK >> Select Events >> choose Event Level as Critical, Warning, Error >> OK >> OK
 
Client computers:
Install remote management Forwarding (XP/2003 machines: https://www.microsoft.com/en-us/download/details.aspx?id=21900):
# winrm qc -q

Leave a Reply

Your email address will not be published. Required fields are marked *