You are the network administrator for an organization that has all Windows Server 2008 R2
domain controllers.
You need to capture all replication errors that occur between all domain controllers.
What should you do?
A.
Use System Performance data collector sets.
B.
Use ntdsutil.
C.
Configure event log subscriptions.
D.
Use the ADSI Edit tool.
Explanation:
http://technet.microsoft.com/en-us/library/cc748890.aspx
Configure Computers to Forward and Collect Events
Before you can create a subscription to collect events on a computer, you must configure
both the collecting computer (collector) and each computer from which events will be
collected (source).
http://technet.microsoft.com/en-us/library/cc749183.aspx
Event Subscriptions
Event Viewer enables you to view events on a single remote computer. However,
troubleshooting an issue might require you to examine a set of events stored in multiple logs
on multiple computers.
Windows Vista includes the ability to collect copies of events from multiple remote
computers and store them locally. To specify which events to collect, you create an event
subscription. Among other details, the subscription specifies exactly which events will be
collected and in which log they will be stored locally. Once a subscription is active and
events are being collected, you can view and manipulate these forwarded events as you
would any other locally stored events.
Using the event collecting feature requires that you configure both the forwarding and the
collecting computers.
The functionality depends on the Windows Remote Management (WinRM) service and the
Windows Event Collector (Wecsvc) service. Both of these services must be running on
computers participating in the forwarding and collecting process.
http://technet.microsoft.com/en-us/library/cc961808.aspx