Given the requirements vary with Collector initiated vs. Push collection of events, note that I'm only using the Push method.
I have a Win10 Collector and two clients, Win10 & Win7. All of the machines are in the same domain.
Since I'm using Push, I did not perform any special configuration on the clients. I did everything via GP.
1. Configured the subscription manager. Server=http://mycollector.fabrikam.com:5985/wsman/SubscriptionManager/WEC,Refresh=60
2. Allowed remote server management though WinRM. ALL IP's
3. Enable WinRM to automatically start - which it does on all machines.
I get this on both Clients:
The forwarder is having a problem communicating with subscription manager at address http://mycollector.fabrikam.com:5985/wsman/SubscriptionManager/WEC. Error code is 2150859027 and Error Message is <f:WSManFault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault"
Code="2150859027" Machine="Win7Ex64.fabrikam.com"><f:Message>The WinRM client sent a request to an HTTP server and got a response saying the requested HTTP URL was not available. This is usually returned by a HTTP server that does
not support the WS-Management protocol. </f:Message></f:WSManFault>.
This message appears roughly every 60 seconds in the Win7 log but very seldom in the WIn10 log.
So the clients obviously see the subscription and try to contact the Collector but fail.
I can ping the server by name and the firewall rule for port 5985 is enabled.
Lastly, I set up an additional Collector on a Server 2012 R2 machine and added it to the subscription GP. Both machines reported the same error connecting to it.
Not sure what else to try. Any suggestions are appreciated.