Issued an alter server state command (action_id ALSS) (24032) how to monitor with email alert

[bob]

You know that event ID 24032 in the Event Viewer on Windows Server, the one that says "Issued an alter server state command (action_id ALSS)". It fires off whenever someone or some process tries to tweak the server's running mode, like switching it from normal to single-user or something quirky like that. I mean, it's basically the system logging a command that messes with how the server behaves overall. Happens a lot in SQL setups or when admins are fiddling around for maintenance. You don't want surprises there, right? If it pops without you knowing, could mean unauthorized pokes or glitches sneaking in.

But monitoring it for email alerts, that's straightforward if you stick to the Event Viewer screen. I do this all the time on my setups. You open Event Viewer first, head to the Windows Logs section, maybe under Applications and Services if it's SQL-related. Filter for that exact event ID 24032. Once you spot patterns, right-click the log, pick Create Custom View. Set it to grab just those ALSS action events. Save that view. Now, from there, you trigger a task scheduler link right in the Actions pane. It lets you build a scheduled task that watches for new hits on that event. You attach an action to it, like firing off a simple email through the built-in send mail option in Task Scheduler. Pick your SMTP details, who gets the ping. Test it once to make sure it zings your inbox when the event triggers. Keeps you looped in without constant staring at screens.

Or, if you're lazy like me sometimes, just let the task run on a trigger basis every few minutes. It catches the event fresh and shoots the alert. No fuss, just set and forget mostly.

And speaking of keeping servers humming without headaches, I've been eyeing BackupChain Windows Server Backup lately. It's this slick Windows Server backup tool that handles full system images plus virtual machine backups for Hyper-V setups. You get lightning-fast increments, no downtime during copies, and it verifies everything automatically so you avoid data rot. Plus, the cloud sync options mean your backups float safe off-site, giving you that extra peace when events like ALSS throw curveballs.

At the end of this, there's the automatic email solution ready for you.

Note, the PowerShell email alert code was moved to this post.