Your network contains an Active Directory domain named adatum.com. The domain
contains a member server named Server1 and 10 web servers. All of the web servers are in
an organizational unit (OU) named WebServers_OU. All of the servers run Windows Server
2012 R2.
On Server1, you need to collect the error events from all of the web servers. The solution
must ensure that when new web servers are added to WebServers_OU, their error events
are collected automatically on Server1.
What should you do?

A.
On Server1, create a source computer initiated subscription. From a Group Policy object
(GPO), configure the Configure target Subscription Manager setting.

B.
On Server1, create a source computer initiated subscription. From a Group Policy object
(GPO), configure the Configure forwarder resource usage setting.

C.
On Server1, create a collector initiated subscription. From a Group Policy object (GPO),
configure the Configure forwarder resource usage setting.

D.
On Server1, create a collector initiated subscription. From a Group Policy object (GPO),
configure the Configure target Subscription Manager setting.

Explanation:
Source-initiated subscriptions allow you to define a subscription on an event collector
computer without defining the event source computers, and then multiple remote event
source computers can be set up (using a group policy setting) to forward events to the event
collector computer. This differs from a collector initiated subscription because in the collector
initiated subscription model, the event collector must define all the event sources in the
event subscription.
1. Run the following command from an elevated privilege command prompt on the Windows
Server domain controller to configure Windows Remote Management: winrm qc -q
2. Start group policy by running the following command:
%SYSTEMROOT%\System32\gpedit. msc
3. Under the Computer Configuration node, expand the Administrative Templates node, then
expand the Windows Components node, then select the Event Forwarding node.
4. Right-click the SubscriptionManager setting, and select Properties. Enable the
SubscriptionManager setting, and click the Show button to add a server address to the
setting. Add at least one setting that specifies the event collector computer. The
SubscriptionManager Properties window contains an Explain tab that describes the syntax
for the setting.

5. After the SubscriptionManager setting has been added, run the following command to
ensure the policy is applied: gpupdate /force.
If you want to configure a source computer-initiated subscription, you need toconfigure the
following group policies on the computers that will act as the event forwarders:
* (A) Configure Target Subscription Manager This policy enables you to set the location of
the collector computer.