Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
Subscribe to TerminalServices-Gateway Operational log

Answered Subscribe to TerminalServices-Gateway Operational log

  • Friday, January 04, 2013 8:52 PM
     
     
    Sign In to Vote
    0

    I want to subscribe to TerminalServices-Gateway log from my workstation.

    However; when I create a subscription I don't have the option of selecting that log.

    Does anyone know how I can subscribe to the TerminalServices-Gateway Operational log?

    Thanks.

     

All Replies

  • Friday, January 04, 2013 10:14 PM
     
     Answered
    Sign In to Vote
    0

    When creating an event subscription the Query Filter only recognizes sources that are registered on that particular machine, e.g. your workstation in this case.  It is easiest to perform subscriptions from a server with the roles you wish to monitor installed (in this case, the RD Gateway role).  From a workstation you can try to register the event log you are trying to subscribe to on the workstation, and then it will appear in Query Filter and you can create the subscription.  I'm not 100% this will work but try the following:

    On your RD Gateway server, export the following registry keys:

    HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Microsoft-Windows-TerminalServices-Gateway

    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-TerminalServices-Gateway

    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Providers\{GUID} (The GUID will be recorded as a value in the other two keys, you need the key under Providers that matches that GUID).

    Import these keys from the saved exports to your workstation registry.  There is also a .dll you will need to copy from the RD Gateway server under C:\Windows\System32.  You can find the name of the .dll in those registry keys as well.  Place this .dll in your workstation's C:\Windows\System32 directory.

    After you have done all of this, reboot.  You should see the TerminalServices-Gateway log now under your Applications and Services Logs folder locally.  The log will also appear in the Query Filter so you should be able to create a subscription from it.

    Again, not 100% sure this will work but I think it will.


    Edit: This assumes your bits are matching - e.g. try with Server 2008 R2 and Win 7 Pro x64.  If you mix x64 and x32 you'll have to play around with SysWOW64 .dll as well.
    • Edited by Neil Frick Friday, January 04, 2013 10:14 PM
    • Edited by Neil Frick Friday, January 04, 2013 10:16 PM
    • Edited by Neil Frick Friday, January 04, 2013 10:21 PM
    • Marked As Answer by xbaldxaaronx Monday, January 07, 2013 7:36 PM
    •  
     
  • Monday, January 07, 2013 7:36 PM
     
     
    Sign In to Vote
    0

    that worked perfectly.

    Thanks!