Event log doesn't show any problem. It does show allow gui_rpc from the computer IP I would like to monitor from. Doesn't seem to be invoking any security. I think I'll try another vm and see if the result is the same.