Windows 10: Windows Remote Management events logged on my computer. Why?

I was looking through the Windows 10 Event Viewer and noticed that Windows Remote Management has been logging events, even though I have never used it.

Log entries include:
Event ID 254 Activity Transfer
Event ID 145 WSMan operation Enumeration started with resourceUri
Event ID 161 The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests.

To view these entries I went to Event Viewer > Applications and Services Logs > Microsoft > Windows > Windows Remote Management > Operational

The service Windows Remote Management was set to manual when I looked. I have set it to disabled for the time being.
From the Event Viewer, it appears the Windows Remote Management activity occurs anywhere between several times per day and once every couple of days. The time of day it occurs varies.

Does anyone else have these entries in their logs? This is a privately owned computer and not on a corporate network.

:)

 

Windows 10 Remote Management events

Hi Maverick,





For advanced assistance regarding your concern, we suggest you to post your query in

TechNet forums.

 

Windows 10 Remote Management events

I was checking my event viewer the other day and noticed that there is a Windows Remote Management folder with over 500 events in it. I found it weird because I didn't remember enabling such a thing at any point.

This event folder can be found here: Event Viewer> Application and Service Logs>Microsoft>Windows>Windows Remote Management>Operational

There are 4 events which keep repeating over and over again at random times:

Event 145: WSMan operation Enumeration started with resourceUri http://schemas.microsoft.com/wbem/wsman/1/config/listener

Event 254: Activity Transfer

Event 161: The client cannot connect to the destination specified in the request. Verify that the service on the destination is running and is accepting requests. Consult the logs and documentation for the
WS-Management service running on the destination, most commonly IIS or WinRM. If the destination is the WinRM service, run the following command on the destination to analyze and configure the WinRM service: "winrm quickconfig".

Event 142: WSMan operation Enumeration failed, error code 2150858770

Why does this thing trying to authenticate and transfer some data? What is causing it to do so? I only see these repeating events on my personal PC and not on the others. Other PCs have 0 WinRM events.

 

remote desktop connection and windows event logs

I'm running remote desktop connection on windows 10 and it won't connect to a remote machine on my own LAN, the error message is:

"This computer can't connect to the remote computer.

Try connecting again. If the problem continues, contact the owner of the remote computer or your network administrator."

There's nothing wrong with the remote machine because other windows computers on the same lan can connect to it but the windows 10 machine can't. The error message above doesn't give any reason or error number as to why it fails. I've been through the firewall
settings, everything looks ok and I'd also tried turning the firewall off, it made no difference.

I expect I may find something if I look in the event logs but I can't see anything there relevant to these failed connections. Where exactly would such info be in the logs?