Hi, I have issues with event forwarding The forwarding computer is running on XP-SP3 The Collection computer is runninf on windows 7 I have added then a subscription to the server and tested it. It works corectly. I want to the events to be collected faster. I tried the "Minimize Latency" option but i it didnt work. I have the following error: "WinRM client could not create a subscription by push-type transmission, because no matching listener host name and transport specified is configured or any firewall exception is enabled on the port selected by the listener. Updated on hostname and transportation, create a firewall exception properly executed or winrm quickconfig" The source firewall is disabled. Is there something to configure? Thanks

For computers running Windows XP or Windows Server 2003 to act as forwarding computers, you must install WS-Management 1.1: http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=21900 Secondly, make sure there is a Windows Firewall exception for HTTP on both the collecting and the forwarding computers. Please revert back here if this does not resolve your issue. Hope it helps!Kunal D Mehta - a Windows Server Enthusiast.

Thank you for reply I have already installed "Windows Remote Management (WinRM) 2.0" Concerning the exception no matter because both firewalls are disabled.

In that case, is the "Windows Event Collector" service running on the collecting computer? If the forwarding computer is a non-domain PC, they'll need to have a computer certificate. Just to be sure you followed all the steps, here's a summary of things to do to forward events to another computer: On Forwarding Computer winrm quickconfig net localgroup "Event Log Readers" <computerName>$@<domainName> /add Example: net localgroup "Event Log Readers" server1$@contoso.com /add On Collecting Computer wecutil qc Please revert back if all these settings are in place and you still face this issue. Hope it helps! Kunal D Mehta - a Windows Server Enthusiast.

net localgroup "Event Log Readers" <computerName>$@<domainName> /add The "Event Log Readers" local group does not exist in windows XP i added the computer account to the "admins" group, and it worked correctly in normal mode, my probleme is only with "Minimize Latency" option.

I'm not very sure about the "Minimize Latency" option because I've never given it a shot before in production environment. But I found a couple of links that might help you: http://technet.microsoft.com/en-us/library/cc748890.aspx [Read "Community Content" below, might help] http://technet.microsoft.com/en-us/library/cc749167%28WS.10%29.aspx If this does not help either, then let's wait for an expert to provide us with the solution. Thanks!Kunal D Mehta - a Windows Server Enthusiast.

Thank you for help I have already applied these steps. I think this may help http://technet.microsoft.com/en-us/library/ee922665%28WS.10%29.aspx I will try tomorrow changing specifying explicitlty the ports and change to "source initiated".

I have issues also with "source initiated" subscription. I have followed the stepd mentionned in this page : http://msdn.microsoft.com/en-us/library/bb870973%28v=VS.85%29.aspx The problem is that source computers list is still empty althow I have already added a computer.(which is a domain member)