I have Windows 2008 server running as event collector in a source initiated setup where it collects logs from the client machines. The collector server is on the parent domain and it has no problem collecting logs from the same parent domain nodes. However, it cannot collect logs from the child domain nodes. The child domain nodes are setup the same way as the parent domain nodes for the event collection. I see this error on the child domain nodes: The forwarder is having a problem communicating with subscription manager at address http://collector.domain.com:80/wsman/subscriptionmanager/wec . Error code is 2150859027 and Error Message is <f:WSManFault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" Code="2150859027" Machine="clientA.child.domain.com" xml:lang="en-US"><f:Message>The WinRM client sent a request to an HTTP server and got a response saying the requested HTTP URL was not available. This is usually returned by a HTTP server that does not support the WS-Management protocol. </f:Message></f:WSManFault>. When I run this command on the child domain node, it executes it without any error: winrm id /r:collector.domain.com:80/wsman/subscriptionmanager/wec /a:none This command returns: IdentifyResponse ProtocolVersion = http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd ProductVendor = Microsoft Corporation ProductVersion = OS: 0.0.0 SP: 0.0 Stack: 1.1

Have you enabled the Firewall rule? Using this command below to enable firewall rule netsh firewall add portopening TCP 443 "Winrm HTTPS Remote Management" Can you Test WS-Man access to a remote machine? winrm id -remote:<some machine> Has source computer registered with the Collector? wecutil gr <subscription name> You can read more here below. wecutil commands - http://technet.microsoft.com/en-us/library/cc753183(v=ws.10).aspxRemember to Vote as helpful for others and accept the the proposed Answer if it is relevant to build KB in this Forum. [MCITP] | [MCITP:EA] | [MCITP:VA] | [MCITP:EMA] | [MCITP:SPA] | [MCSE] | [MCSE:M+] | [MCSA] | [MCSA:M+] | [ITILv3] | [CCNA] | [IPSWITCH:WhatsUpGold]