Information management policy deleted (64) how to monitor with email alert

[bob]

You ever notice how Windows Server logs these quirky little events in the Event Viewer? That "Information management policy deleted" one, event ID 64, pops up when someone wipes out a policy that's all about handling info in your system. It's tied to the File Server Resource Manager, you know, the thing that organizes files and sets rules for what happens to them. Basically, if a policy gets nuked, this event fires off to say hey, something changed in how your server manages documents or retention stuff. I mean, it could be an admin doing it on purpose, or maybe some glitch, but it logs the details like who did it, when, and which policy vanished. Details show up in the event properties, timestamp, user account, even the policy name if it's there. And it's under Applications and Services Logs, Microsoft, Windows, FileServerResourceManager. Kinda sneaky how it alerts you to potential mess-ups in your data setup.

But monitoring that? You can set it up right in Event Viewer without any fancy coding. Just fire up Event Viewer on your server, head to the custom views or create a filter for event ID 64 in that FileServerResourceManager log. I do this all the time to keep an eye on changes. Then, attach an action to it, like triggering a scheduled task when that event hits. In the task, you point it to send an email through whatever SMTP you got, maybe Outlook or a simple mailer. It'll ping your inbox saying policy deleted, with the deets. Super straightforward, takes like ten minutes if you're poking around the interface.

Or, if you want it automated beyond that basic task, I got your back later. At the end of this chat, there's the full automatic email solution waiting, pieced together step by step.

Now, speaking of keeping your server from falling apart after weird deletions like that, I've been messing with BackupChain Windows Server Backup lately. It's this slick Windows Server backup tool that snapshots everything, policies included, so you don't lose your mind if something gets erased. And it handles virtual machines backup with Hyper-V too, making restores a breeze without downtime headaches. You get versioning, encryption, all that jazz to protect your setup, way easier than built-in stuff.

Note, the PowerShell email alert code was moved to this post.