Event Forwarding Error 5 Access Denied

David Jenkins 946 Reputation points
2021-11-09T16:22:32.117+00:00

I setup a new 2012R2 lab. I setup event log forwarding using group policies to enable winrm and setup the forwarder to a member server. I added the Network Service account and the logging server to the Event Log Readers group in AD and on local servers Event Log Readers group.

147892-image.png

I keep getting this error on the dc's. I don't know why.

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,111 questions
0 comments
Accepted answer
  1. David Jenkins 946 Reputation points
    2021-11-09T17:52:52.167+00:00

    Okay I figured it out.

    I was using a script to setup the subscriptions and I hadn't added the PC's.

    So this error. Error 5 can be caused by not having ANY subscription setup for that system

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest