New
#1
Windows Remote Management events logged on my computer. Why?
I was looking through the Windows 10 Event Viewer and noticed that Windows Remote Management has been logging events, even though I have never used it.
Log entries include:
Event ID 254 Activity Transfer
Event ID 145 WSMan operation Enumeration started with resourceUri
Event ID 161 The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests.
To view these entries I went to Event Viewer > Applications and Services Logs > Microsoft > Windows > Windows Remote Management > Operational
The service Windows Remote Management was set to manual when I looked. I have set it to disabled for the time being.
From the Event Viewer, it appears the Windows Remote Management activity occurs anywhere between several times per day and once every couple of days. The time of day it occurs varies.
Does anyone else have these entries in their logs? This is a privately owned computer and not on a corporate network.