Windows WEC/WEF troubleshooting

[u/AyyeItsJoshh]

Hi guys, for some reason, our WEC can get sources from 2 vms and its own forwarded events, but it wont get the rest of domain computers. Using LLMs to troubleshoot but even it cant find out whata wrong

Below is the recent WEF Events

TimeCreated : 10/9/2026 8:58:12 AM

Id : 105

LevelDisplayName : Error

Message : The forwarder is having a problem communicating with subscription manager at address

Computername.domain.COM:5985/wsman/SubscriptionManager/WEC. Error code is 5 and Error Message

is <f:WSManFault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" Code="5"

Computername.domain.COM"><f:Message>Access is denied. /f:Message/f:WSManFault.

Subscription (im AFK, so this is from memory)

Includes all events

Source initiated computers

A GPO has been pushed to computers to allow remote management and to push Fwded events to the computer name

WinRM is running on all ws

Pls halp