Windows Server 2019 – Troubleshooting Event Forwarding with 0 Source Computers

active-directorywindows-server-2019

So I've configured my Windows Server 2019 as an event logger to get the events of shutdown,and logoff from my domain computers. I've included the DOMAIN\Domain Computers group and configured the Event Forwarding Subscription Group Policy through http as explained here with my SQDN as listed in the system properties. I've also allowed the 5985 port through my firewall just in case, and after all this configurations I still get 0 source computer. If you need see any concret configuration I will edit my question. Any ideas?

Best Answer

I finally found out what my mistake was. I had to start winrm service on every source computer, as well as configuring the Event Forwarding Suscription Group Policy. To do this I followed this Microsoft official guide. (the Configuring the event source computer section)

Related Topic