Got the same error too. My machines getting this error are Windows 2003 32-bit with IIS. Created a support case with SPlunk but no response yet. Would really like to know the solution to this since it's holding up our Forwarder roll-out on Windows (1000 clients). Linux machines were a breeze. Also, what version of the forwarder are you using? If using version 6.0.2, be aware of known issue SPL-79009 since forwarding is essentially broken. We were trying forwarder version 6.0.2 but went back to 6.0.1 because of this issue. However, both versions won't install. http://docs.splunk.com/Documentation/Splunk/6.0.2/ReleaseNotes/KnownIssues Mike ... View more