event subscription Access denied

[aconti]

Hello,

I am trying to enable event forwarding from one DC to another. I have run winrm quickconfig on the source dc and wecutil qc on the collector. Also I have added the admin account that I am using to the Event Log readers of the source pc however in the subscription when I clic runtime status I get (0x5): Access is denied and no events are forwarded.

Thank yoo

[Daniel23]

Please check if the administrator is a member of the group of guests. If so, please remove the membership for the administrator. Now check if you are able to view the records or not. To remove the group Guest You have to go to Control Panel - Administrative Tools - Computer Management - Local Users and Groups. Click Groups of people then. Be sure to remove your username from the group of guests. I hope this will help you thank you.