The corporate network of Company consists of a Windows Server 2008 single Active Directory domain. The domain has two servers named Company 1 and Company 2.
To ensure central monitoring of events you decided to collect all the events on one server, to collect events from Company, and transfer them to Company 1.
You configure the required event subscriptions.
You selected the Normal option for the Event delivery optimization setting by using the HTTP protocol.
However, you discovered that none of the subscriptions work.
Which of the following actions would you perform to configure the event collection and event forwarding on the two servers? (Select three. Each answer is a part of the complete solution).
A.
Run window execute the winrm quickconfig command on Company 2.
B.
Run window execute the wecutil qc command on Company 2.
C.
Add the Company 1 account to the Administrators group on Company 2.
D.
Run window execute the winrm quickconfig command on Company 1.
E.
Add the Company 2 account to the Administrators group on Company 1.
F.
Run window execute the wecutil qc command on Company 1.
Correct answer is A, C and F.
While I cannot find anything that specifically states that a collector cannot also be a forwarder, I did find this concerning the Administrators group:
http://technet.microsoft.com/en-us/library/cc748890.aspx
Correct answers are A, D, and F as indicated as per below:
To configure computers in a domain to forward and collect events
Log on to all collector and source computers. It is a best practice to use a domain account with administrative privileges.
On each source computer, type the following at an elevated command prompt:
winrm quickconfig
Note
If you intend to specify an event delivery optimization of Minimize Bandwidth or Minimize Latency , then you must also run the above command on the collector computer.
On the collector computer, type the following at an elevated command prompt:
wecutil qc