Solved Looking for a event id that can tell me that the computer has started

[stuart253]

Hello,

Of all of the event ids that are generated when my PC starts, I am looking for one that I can use to trigger an e-mail to myself.

For example, when my backup starts, event id 4097 has been setup to trigger an e-mail to me stating that my backup has started. Event id 4098 has been setup to trigger an e-mail notifying me that my backup has finished.

In the past I had issues with my backups completing. Without going into the details, my backup issue appears to have been resolved. If I do not receive e-mails stating that my backup has started and
ended, I know that there was some issue and I can research the problem.

I sometimes leave my computer on overnight with some application open. In the past, my machine would sometimes restart.

I use to have a problem with my computer crashing or freezing. After my graphic card went bad and had been replaced, I do not believe that my PC crashes as often.

To early an event and I may not be able to send an e-mail.

When I get the e-mail and I know that neither I nor any member of my family did not start the computer, I can look through the logs to see if I can determine why.

Does anyone have a suggestion as to a good event id to trigger on?

If I have select the wrong area to post this thread I apologize .

Thanks in advance

Stu

 

[Ztruker]

You could run a Powershell script from the Startup folder to do this: Something like:

$smtp = new-object Net.Mail.SmtpClient("mail.example.com")

if( $Env:SmtpUseCredentials -eq "true" ) {
$credentials = new-object Net.NetworkCredential("username","password")
$smtp.Credentials = $credentials
}
$objMailMessage = New-Object System.Net.Mail.MailMessage
$objMailMessage.From = "[email protected]"
$objMailMessage.To.Add("[email protected]")
$objMailMessage.Subject = "eMail subject Notification"
$objMailMessage.Body = "Hello world!"

I did a Google search to find the above: send email from batch file

 

[carwiz]

It's much simpler to just create a scheduled task at startup to send an email. "Start up" is one of the events you can specify as a trigger.

 

[Ztruker]

On Windows 8 Send an E-mail is deprecated. Have not tried it on Windows 7.

 

[stuart253]

Does the "start up" event have an event id?

Hello carwiz,

Does the "start up" event have an event id? Can one scan for "start up" in the logs?

Thanks

Stu

 

[carwiz]

I don't know of a specific event for start up. I checked through mine and couldn't identify anything tied to that event alone. Did you try the Task Schedule? You do need a SMTP server address to send it. Your mail server probably has one. The address will be something like "smtp." followed by your normal server address. This bypasses normal email processes. Probably why W8 won't use it.

 

[carwiz]

On Windows 8 Send an E-mail is deprecated. Have not tried it on Windows 7.

View attachment 324123

I found this at Windows Development Center for task scheduler interface:

Windows 8 and Windows Server 2012: This interface has been removed. Please use IExecAction with the powershell Send-MailMessage cmdlet as a workaround.

 

[andrew129260]

You could use the event viewer application under user profile service started id 1531. I think that would be sufficient. Of course for this the auto login feature must be used. Windows not having a password for only a single account so it auto logins.

Another thing that could work is if you use the action center, the security center service seems to only start when the pc boots, (unless it was manually disabled,stopped) that is event ID 1

 

[carwiz]

I tried the task method and couldn't get it to send. I kept getting the error below. Apparently, so does everyone else that attempts it.

CDO_E_SMTP_SEND_FAILED
0x80040211L
The message could not be sent to the SMTP server. The transport error code was %2. The server response was %1


Andrew - Scripted Diagnostics also get Event ID 1.

 

[Ztruker]

On Windows 8 Send an E-mail is deprecated. Have not tried it on Windows 7.

View attachment 324123

I found this at Windows Development Center for task scheduler interface:

Windows 8 and Windows Server 2012: This interface has been removed. Please use IExecAction with the powershell Send-MailMessage cmdlet as a workaround.

That's the Powershell script I posted above I think.

 

[stuart253]

Found a solution to my but not exactly what I was looking for

Hello,

Found a solution but not exactly what I was looking for.

I could not find a "system startup" event id. If may be out there but I could not find it.

I settled for the Event ID for Norton startup. Its Event ID is 34.

When Norton starts, I can trigger an e-mail to be sent to me.

Thanks for all who looked and responded.

Stu

 

[Ztruker]

Sounds like a good alternative.

I still think just putting a link to the batch file in the Startup folder would work as well, but as long as you have a workable solution all is well.

 

[DavidE]

For the system startup look at Kernel-General Event ID 12

 

[Ztruker]

That's in my Windows 8 Pro X64 as well. Looks like a good one to use.