You have 15 computers that run Windows 7.
You need to implement a monitoring solution that meets the following requirements:
Sends an e-mail notification when an application error is logged in the event log

Runs a script to restart the computer if an application error occurs between 17:00 and 07:00

Minimizes the administrative effort required to monitor applications

What should you do?
Correct Answer: D
Explanation/Reference:
Explanation:
Event forwarding enables you to transfer events that match specific criteria to an administrative (or collector) computer. This enables you to manage events centrally. A single event log on the collector computer holds important events from computers anywhere in your organization. You do not need to connect to the local event logs on individual computers.
Subscriptions In a source-initiated subscription (sometimes termed a source computer-initiated subscription), the computer on which an event is generated (the source computer) sends the event to the collector computer. You would use a source-initiated subscription when you have a large number of source computers and you configure these computers through Group Policy.