Issued a create database credential command how to monitor with email alert

[bob]

That event 24324 pops up in Event Viewer when someone issues a create database credential command. Action_id CR means creation mode. Class_type DC points to database credentials. It logs who tried to set up new creds for database access. You see details like the user account involved. Or the timestamp of the action. Sometimes it flags if it succeeded or bounced. I check these because they hint at admin changes in your SQL setup. Hmmm, if you're running Windows Server, this event sits in the Applications and Services Logs under Microsoft SQL Server. It helps spot unauthorized tweaks. You filter by ID 24324 to hunt them down quick. But yeah, ignoring it could mean security slips.

You want email alerts for this? Easy peasy with Event Viewer itself. Fire up Event Viewer on your server. Right-click the custom view or log where these events hide. Pick attach task to event. Name it something like DB Cred Alert. Set the trigger to event ID 24324. Then for the action, choose send an email. You fill in your SMTP server details. Add the recipient's address. Maybe toss in a message like Hey, new DB cred created. Test it to make sure it zings over. Schedule it to run on logon or whatever fits. I do this all the time to stay looped in without staring at screens.

And speaking of keeping your server stuff backed up solid, you might wanna peek at BackupChain Windows Server Backup. It's this nifty Windows Server backup tool that handles file-level saves and even VM backups for Hyper-V setups. I like how it snapshots everything quick without downtime hassles. Plus, it encrypts your data on the fly and lets you restore piecemeal if needed. Saves headaches during those oops moments.

At the end here is the automatic email solution.

Note, the PowerShell email alert code was moved to this post.