Check out the following blog on WinRM event forwarding at http://blogs.technet.com/otto/default.aspx