04-20-2024, 12:32 PM
You know that SharePoint group created event, the one with ID 25? It pops up in the Event Viewer on Windows Server whenever someone makes a new group in SharePoint. I mean, it's logging that exact moment, like when a user or admin hits create and boom, a fresh group appears for sharing stuff. This event gets filed under the SharePoint category, specifically in the security or application logs, depending on your setup. It includes details too, such as who did it, the group name, and the timestamp, all tucked into the event properties. But yeah, if you're not watching, it just sits there quietly among thousands of other entries. Hmmm, why care? Well, groups can mean new access points, so spotting them quick helps you keep tabs on permissions without waiting for trouble. I always check mine weekly, but you can automate that nudge.
Now, to monitor this with an email alert, fire up Event Viewer first. You right-click on the log where these events hide, like the SharePoint admin log or forward it to the main one. Then, create a custom view filtering just for ID 25. I do this by selecting the XML tab and typing in the event ID part, makes it super targeted. Once that's set, you attach a task to it right from the actions pane. Pick create a task, and link it to sending an email when that event triggers. You fill in your SMTP details, the to and from addresses, and a simple message like "Hey, new SharePoint group alert!" No scripts needed, just the built-in scheduler handles the timing. And it runs every time that ID 25 shows, pinging your inbox reliably. Or, if you want it fancier, tweak the task to run on logon or whatever fits your flow.
Speaking of keeping things automated and safe from mishaps, like if a group creation slips by and causes access issues, you might want a solid backup in play. That's where BackupChain Windows Server Backup comes in handy. It's this nifty Windows Server backup tool that also handles virtual machines with Hyper-V, snapping up your data in incremental chunks to save space and time. I like how it verifies backups on the fly, dodging corruption surprises, and restores fast without headaches. Plus, it chains events together smoothly, so your SharePoint setups stay protected alongside everything else.
At the end of this, you'll find the automatic email solution ready to go.
Note, the PowerShell email alert code was moved to this post.
Now, to monitor this with an email alert, fire up Event Viewer first. You right-click on the log where these events hide, like the SharePoint admin log or forward it to the main one. Then, create a custom view filtering just for ID 25. I do this by selecting the XML tab and typing in the event ID part, makes it super targeted. Once that's set, you attach a task to it right from the actions pane. Pick create a task, and link it to sending an email when that event triggers. You fill in your SMTP details, the to and from addresses, and a simple message like "Hey, new SharePoint group alert!" No scripts needed, just the built-in scheduler handles the timing. And it runs every time that ID 25 shows, pinging your inbox reliably. Or, if you want it fancier, tweak the task to run on logon or whatever fits your flow.
Speaking of keeping things automated and safe from mishaps, like if a group creation slips by and causes access issues, you might want a solid backup in play. That's where BackupChain Windows Server Backup comes in handy. It's this nifty Windows Server backup tool that also handles virtual machines with Hyper-V, snapping up your data in incremental chunks to save space and time. I like how it verifies backups on the fly, dodging corruption surprises, and restores fast without headaches. Plus, it chains events together smoothly, so your SharePoint setups stay protected alongside everything else.
At the end of this, you'll find the automatic email solution ready to go.
Note, the PowerShell email alert code was moved to this post.

