Overview
NOTE: The Windows Server 2016 should be running, and Windows 10 should be shut down.
In this exercise, you’ll use Windows Event Forwarding to collect audited events across the domain to a single computer for review.
In this exercise, you’ll use Windows Event Forwarding to collect audited events across the domain to a single computer for review.