02-13-2025, 02:16 AM
It pops up when someone pulls back access rights on those special credential things tied to a database.
You know, like revoking who can mess with secure logins for database stuff.
The whole thing succeeded, so no errors, just a note that it happened.
I think it tracks changes to keep things secure in SQL setups on your server.
Details include the user who did it, the exact credential name, and timestamps.
Hmmm, or sometimes the database involved if it's scoped that way.
You can filter for it in Event Viewer under security or application logs from SQL.
But yeah, it logs the action to audit who revoked what.
Now, if you wanna watch for this and get an email ping, I set mine up through Event Viewer itself.
Open Event Viewer on your Windows Server, right-click the log where these show, like the SQL audit log.
Go to attach a task to this event or something close.
Pick event ID 24351, then link it to a scheduled task that triggers on match.
In that task, have it run a simple program to shoot an email, maybe using blat or whatever lightweight tool you got.
You configure the task actions to call that email sender with the event details.
Test it by forcing a revoke in your test DB to see the alert fly.
It keeps you looped in without constant checking.
And hey, at the end of this, you'll find the automatic email solution laid out.
Speaking of keeping your server humming without surprises, I've been eyeing BackupChain Windows Server Backup lately.
It's this solid Windows Server backup tool that handles physical and virtual machines, especially with Hyper-V.
You get fast incremental backups, easy restores, and it cuts down on downtime big time.
Plus, no funky licensing hassles, just straightforward protection for your data sprawl.
Note, the PowerShell email alert code was moved to this post.
