Configure the Windows firewall for AD Logga
If the Windows firewall is activated on the domain controller you want to monitor, enable the following predefined rules:
- Remote Event Log Management (NP-In)
- Remote Event Log Management (RPC)
- Remote Event Log Management (RPC-EPMAP)
Repeat the procedure for each domain controller you want to monitor.
(Screenshot property of © 2020 Microsoft)