Additional Resources

Configure HTTPS

https://docs.microsoft.com/en-US/troubleshoot/windows-client/system-management-components/configure-winrm-for-https

https://docs.microsoft.com/en-us/windows/win32/wec/setting-up-a-source-initiated-subscription

Event Subscriptions

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc749183(v=ws.11)

Source vs Collector Initiated Subscriptions

https://docs.microsoft.com/en-us/windows/win32/wec/setting-up-a-source-initiated-subscription

Advanced Subscription Settings

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc749167(v=ws.11)

https://docs.microsoft.com/en-us/windows/win32/wec/wecutil (wecutil.exe)

Event ID Definitions

Windows Server 2003 auditing event ID listings can be found in two locations:

Auditing Policy from Windows Server 2003: Security and Protection:

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc779526(v=ws.10)

Chapter 4 of the Windows Server 2003 Security Guide:

https://docs.microsoft.com/en-us/previous-versions//cc163121(v=technet.10)

Windows Server 2008 and Windows Server 2008 R2 events and errors details for general OS components can be found on Microsoft’s TechNet website

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc754424(v=ws.10)

Windows Server 2008 Component-Based Servicing events

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc756291(v=ws.10)

Windows 7 AppLocker Event IDs and definitions:

https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee844150(v=ws.10)

Useful Links

Distributed Management Task Force, Inc: Web Services for Management (WSManagement) Specification.

https://www.dmtf.org/sites/default/files/standards/documents/DSP0226_1.0.0.pdf

Microsoft Corporation: Credential Security Support Provider (CredSSP) Procotol.

https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-cssp/85f57821-40bb-46aa-bfcb-ba9590b8fc30

Microsoft Corporation: Windows Error Codes.

https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-erref/1bc92ddf-b79e-413c-bbaa-99a5281a6c90

Microsoft Corporation: Web Services Management Protocol Extensions for Windows Vista.

https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-wsmv/055dc36b-db2a-41ae-a47b-82cbfa0b4a92

Microsoft Corporation: Setting up a Source Initiated Subscription.

https://docs.microsoft.com/en-us/windows/win32/wec/setting-up-a-source-initiated-subscription

Software Sleuthing

https://joshpoley.blogspot.com/2011/09/hresults-facilitywinrm.html

This page contains raw error codes and is meant as a software developer reference.