<br> This service manages persistent subscriptions to events from remote sources that support <br> WS-Management protocol. This includes Windows Vista event logs, hardware and IPMI- enabled event sources. The service stores forwarded events in a local Event Log <br> <br> In a high security environment, remote connections to secure workstations should be <br> minimized, and management functions should be done locally. <br> Fixtext: <br> Fix: <br> (1) GPO: Computer ConfigurationWindows SettingsSecurity SettingsSystem ServicesWindows Event Collector <br> <br> (2) REG: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWecsvc!Start <br>

[Manual/Disabled]

Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services\Windows Event Collector (2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Wecsvc!Start