Forwarding security related events from XP, Win2k3, Vista using WinRM (WSMan) event forwarding

Procedure for forwarding system and application logs from a given winrm endpoint can be found at http://blogs.technet.com/otto/default.aspx  In order to forward security events, the following needs to be done at the endpoint: If endpoint is Vista, WS08: Add “Network Service” to the “Event Log Readers” group. This is because limited users have access to read…

5