Microsoft Event Subscription

Hello,

I configured the Event Subscription on two Windows 7 computers and successfuly tested the connection. However, I am unable to collect the events. Here is the error:

Error - Code (0x138C): <f:ProviderFault provider="Event Forwarding Plugin" path="%systemroot%\system32\wevtfwd.dll" xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault"><t:ProviderError xmlns:t="http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog">Windows Event Forward plugin can't read any event from the query since the query returns no active channel. Please check channels in the query and make sure they exist and you have access to them.</t:ProviderError></f:ProviderFault>
exhuserAsked:
Who is Participating?
 
*** Hopeleonie ***Connect With a Mentor IT ManagerCommented:
Silly question, but did you do the exact steps from:

http://technet.microsoft.com/en-us/library/cc748890.aspx

as the Expert  McKnife told?

Can you also add the NETWORK SERVICE to the builtin Event Log Readers Group?

how to
After restart the Computers, try again and let me know...
0
 
exhuserAuthor Commented:
I followed (I think) the step-by-step instruction and added the network service and the collector computer to the group. And still the same error...
0
 
*** Hopeleonie ***IT ManagerCommented:
"winrm quickconfig" was done on the source computer

and

" wecutil qc" was done on the collector computer?
0
 
exhuserAuthor Commented:
I guess the restart was required for both
0
 
*** Hopeleonie ***IT ManagerCommented:
Why did you just give me a B and not an A? :-)
I asked you whether you did a restart in my first post?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.