You have 15 computers that run Windows 7.
You need to implement a monitoring solution that meets the following requirements:
– Sends an e-mail notification when an application error is logged in the event log
– Runs a script to restart the computer if an application error occurs between 17:00 and 07:00
– Minimizes the administrative effort required to monitor applications
What should you do?
A . On all the computers, configure a custom view. Configure a custom task for the application error events.
B . On a computer, configure a custom view to display the application errors. Configure a custom task for the application error events.
C . On a central computer, configure an event subscription. On all of the computers, configure a custom task in the Forwarded Events log.
D . On all the computers, configure an event subscription to a central computer. On the central computer, configure a custom task in the Forwarded Events log.
Answer: D
Explanation:
Event Forwarding
Event forwarding enables you to transfer events that match specific criteria to an administrative (or collector) computer. This enables you to manage events centrally. A single event log on the collector computer holds important events from computers anywhere in your organization. You do not need to connect to the local event logs on individual computers.
Subscriptions
In a source-initiated subscription (sometimes termed a source computerCinitiated subscription), the computer on which an event is generated (the source computer) sends the event to the collector computer. You would use a source-initiated subscription when you have a large number of source computers and you configure these computers through Group Policy.