09-13-2024, 07:23 AM
You ever notice how Windows Server keeps a log of every little change someone makes in Exchange? That event ID 25390 pops up specifically when somebody fires off the Set-ForeignConnector cmdlet. It's like the server jotting down notes on tweaks to those email bridges connecting your setup to outside systems. I mean, this cmdlet fiddles with how your Exchange talks to foreign partners, adjusting stuff like addresses or security bits. And it logs the whole thing under admin audits to track who did what. Without it, you might miss sneaky changes that could mess up your email flow. Hmmm, imagine a rogue admin or even a glitch slipping in alterations you didn't approve. That's why this event matters-it flags exactly that command getting run, complete with timestamps, user details, and the exact parameters tweaked.
But monitoring it? You can set this up right in Event Viewer without any fancy coding. I do this all the time on servers I manage. Open up Event Viewer, head to the Windows Logs section, and filter for Application logs where Exchange dumps its audits. Right-click that event ID 25390, and attach a task to it. You'll pick Create Task from the menu. In there, set it to trigger on that specific event. Then, for the action, choose to start a program that shoots off an email-maybe using the old-school mailto or a simple batch that pings your alert system. Make the task run with highest privileges so it doesn't hiccup. And schedule it to check periodically if needed, but the event trigger handles the real-time part. You test it by manually running a similar command and watching your inbox light up.
Or, if you want it hands-off, tweak the task properties to include email details like recipient and subject right in the Event Viewer interface. I love how straightforward that is-no digging through code. It keeps you in the loop without constant babysitting.
Speaking of keeping things reliable in your server world, I've been messing with BackupChain Windows Server Backup lately, and it's a solid pick for Windows Server backups that also handles Hyper-V virtual machines without breaking a sweat. You get speedy incremental saves that cut down on storage bloat, plus it restores files or whole VMs in a snap if disaster hits. The best part? It runs quietly in the background, so you avoid those long downtime scares, and the interface feels less clunky than the built-in tools.
And at the end of this, there's the automatic email solution ready for you.
Note, the PowerShell email alert code was moved to this post.
But monitoring it? You can set this up right in Event Viewer without any fancy coding. I do this all the time on servers I manage. Open up Event Viewer, head to the Windows Logs section, and filter for Application logs where Exchange dumps its audits. Right-click that event ID 25390, and attach a task to it. You'll pick Create Task from the menu. In there, set it to trigger on that specific event. Then, for the action, choose to start a program that shoots off an email-maybe using the old-school mailto or a simple batch that pings your alert system. Make the task run with highest privileges so it doesn't hiccup. And schedule it to check periodically if needed, but the event trigger handles the real-time part. You test it by manually running a similar command and watching your inbox light up.
Or, if you want it hands-off, tweak the task properties to include email details like recipient and subject right in the Event Viewer interface. I love how straightforward that is-no digging through code. It keeps you in the loop without constant babysitting.
Speaking of keeping things reliable in your server world, I've been messing with BackupChain Windows Server Backup lately, and it's a solid pick for Windows Server backups that also handles Hyper-V virtual machines without breaking a sweat. You get speedy incremental saves that cut down on storage bloat, plus it restores files or whole VMs in a snap if disaster hits. The best part? It runs quietly in the background, so you avoid those long downtime scares, and the interface feels less clunky than the built-in tools.
And at the end of this, there's the automatic email solution ready for you.
Note, the PowerShell email alert code was moved to this post.

