Hi, I have been tryint to setup event forwarding to keep track of the printer jobs on our school network. After setting up the event forwarding on the event sources (Windows 7 professional) and the collector (Windows Server 2008 r2 with SP1), if I create a collector initiated remote log, I get the following error in the runtime state, for every client: [MA-PR-RESI-1.maristak.maristasbilbao.com] - Error - Última hora de reintento: 03/03/2011 17:43:07. Código (0x32): <f:ProviderFault provider="Event Forwarding Plugin" path="%systemroot%\system32\wevtfwd.dll" xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault"><t:ProviderError xmlns:t="http://schemas.microsoft.com/wbem/wsman/1/windows/EventLog">Error del complemento de reenvío de eventos de Windows al crear la suscripción.</t:ProviderError></f:ProviderFault> Hora de siguiente reintento: 03/03/2011 17:53:07. Text is in Spanish, but the error code is 0x32 and the transtaled text would be: "Event Forward Plugin failed to create subscription."

I've added the local Network User to the event readers group, as I've seen in some other topic (related to forwarding security log), but it has also been useless. Is there some documentation in which I can see what the error codes are, specifically 0x32?