{"id":82,"date":"2015-01-16T10:57:45","date_gmt":"2015-01-16T02:57:45","guid":{"rendered":"http:\/\/kylemcdonald.com.au\/?p=82"},"modified":"2018-08-14T00:36:56","modified_gmt":"2018-08-13T16:36:56","slug":"powershell-script-to-alert-on-server-reboot","status":"publish","type":"post","link":"https:\/\/kylemcdonald.com.au\/2015\/01\/16\/powershell-script-to-alert-on-server-reboot\/","title":{"rendered":"Powershell script to alert on Server reboot"},"content":{"rendered":"<p>Just a quick powershell script that can be kicked off by a scheduled tasks that runs when Event ID 1074 is logged automatically by someone attempting to reboot a server.<\/p>\n<p><!--more--><\/p>\n<pre class=\"lang:ps decode:true \" title=\"Reboot-Requested.ps1\" >&lt;#\r\n.Name\r\n   Reboot-Requested.ps1\r\n.Description\r\n   Powershell script that sends an email when someone requests to reboot a server.\r\n.Parameters\r\n   None.\r\n.Version\r\n   0.1\r\n.Author\r\n   Kyle McDonald\r\n.Compatibility\r\n   All\r\n.Release Date\r\n   July 2014\r\n.Notes\r\nChange Log\r\n   v0.1, 20140701 - Initial version\r\n \r\n   Create a scheduled task based on the following;\r\n   - Trigger: When a specific event is logged\r\n   --- Log: System\r\n   --- Source: User32\r\n   --- Event ID: 1074\r\n#&gt;\r\n \r\n# Variables\r\n$HostName = $env:computername\r\n$DomainName = $env:userdnsdomain\r\n$MailHost = \"mail.contoso.com\"\r\n \r\n# Configure email. \"From@Address\", \"To@Address1,To@Address2,etc@etc\"\r\n$message = new-object System.Net.Mail.MailMessage(\"$hostname@$domainname\", \"user@contoso.com\")\r\n$message.IsBodyHtml = $True\r\n$message.Subject = \"$hostname told to Reboot!\"\r\n$smtp = new-object Net.Mail.SmtpClient(\"$MailHost\")\r\n$reboot_request = get-eventlog -newest 1 -logname system -source USER32 | where {$_.eventID -eq 1074} | fl TimeGenerated,UserName,Message | out-string\r\n \r\n$message.Body = $reboot_request\r\n$smtp.Send($message)\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Just a quick powershell script that can be kicked off by a scheduled tasks that runs when Event ID 1074 is logged automatically by someone attempting to reboot a server.<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[30],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v14.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Powershell script to alert on Server reboot - Kyle McDonald<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kylemcdonald.com.au\/2015\/01\/16\/powershell-script-to-alert-on-server-reboot\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Powershell script to alert on Server reboot - Kyle McDonald\" \/>\n<meta property=\"og:description\" content=\"Just a quick powershell script that can be kicked off by a scheduled tasks that runs when Event ID 1074 is logged automatically by someone attempting to reboot a server.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kylemcdonald.com.au\/2015\/01\/16\/powershell-script-to-alert-on-server-reboot\/\" \/>\n<meta property=\"og:site_name\" content=\"Kyle McDonald\" \/>\n<meta property=\"article:published_time\" content=\"2015-01-16T02:57:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-08-13T16:36:56+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary\" \/>\n<meta name=\"twitter:creator\" content=\"@KarmicIT\" \/>\n<meta name=\"twitter:site\" content=\"@KarmicIT\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/kylemcdonald.com.au\/#website\",\"url\":\"https:\/\/kylemcdonald.com.au\/\",\"name\":\"Kyle McDonald\",\"description\":\"Perth-based IT enthusiast\",\"publisher\":{\"@id\":\"https:\/\/kylemcdonald.com.au\/#\/schema\/person\/f3fe27d0e0f57ef43e2444fbe8989906\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/kylemcdonald.com.au\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-AU\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/kylemcdonald.com.au\/2015\/01\/16\/powershell-script-to-alert-on-server-reboot\/#webpage\",\"url\":\"https:\/\/kylemcdonald.com.au\/2015\/01\/16\/powershell-script-to-alert-on-server-reboot\/\",\"name\":\"Powershell script to alert on Server reboot - Kyle McDonald\",\"isPartOf\":{\"@id\":\"https:\/\/kylemcdonald.com.au\/#website\"},\"datePublished\":\"2015-01-16T02:57:45+00:00\",\"dateModified\":\"2018-08-13T16:36:56+00:00\",\"inLanguage\":\"en-AU\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/kylemcdonald.com.au\/2015\/01\/16\/powershell-script-to-alert-on-server-reboot\/\"]}]},{\"@type\":\"Article\",\"@id\":\"https:\/\/kylemcdonald.com.au\/2015\/01\/16\/powershell-script-to-alert-on-server-reboot\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/kylemcdonald.com.au\/2015\/01\/16\/powershell-script-to-alert-on-server-reboot\/#webpage\"},\"author\":{\"@id\":\"https:\/\/kylemcdonald.com.au\/#\/schema\/person\/f3fe27d0e0f57ef43e2444fbe8989906\"},\"headline\":\"Powershell script to alert on Server reboot\",\"datePublished\":\"2015-01-16T02:57:45+00:00\",\"dateModified\":\"2018-08-13T16:36:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/kylemcdonald.com.au\/2015\/01\/16\/powershell-script-to-alert-on-server-reboot\/#webpage\"},\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/kylemcdonald.com.au\/#\/schema\/person\/f3fe27d0e0f57ef43e2444fbe8989906\"},\"articleSection\":\"Scripting\",\"inLanguage\":\"en-AU\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/kylemcdonald.com.au\/2015\/01\/16\/powershell-script-to-alert-on-server-reboot\/#respond\"]}]},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/kylemcdonald.com.au\/#\/schema\/person\/f3fe27d0e0f57ef43e2444fbe8989906\",\"name\":\"Kyle McDonald\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/kylemcdonald.com.au\/#personlogo\",\"inLanguage\":\"en-AU\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/74b24af47c7a561be463563db3fa821c?s=96&d=mm&r=g\",\"caption\":\"Kyle McDonald\"},\"logo\":{\"@id\":\"https:\/\/kylemcdonald.com.au\/#personlogo\"},\"sameAs\":[\"http:\/\/au.linkedin.com\/in\/karmicit\",\"https:\/\/twitter.com\/KarmicIT\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","_links":{"self":[{"href":"https:\/\/kylemcdonald.com.au\/wp-json\/wp\/v2\/posts\/82"}],"collection":[{"href":"https:\/\/kylemcdonald.com.au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kylemcdonald.com.au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kylemcdonald.com.au\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/kylemcdonald.com.au\/wp-json\/wp\/v2\/comments?post=82"}],"version-history":[{"count":2,"href":"https:\/\/kylemcdonald.com.au\/wp-json\/wp\/v2\/posts\/82\/revisions"}],"predecessor-version":[{"id":251,"href":"https:\/\/kylemcdonald.com.au\/wp-json\/wp\/v2\/posts\/82\/revisions\/251"}],"wp:attachment":[{"href":"https:\/\/kylemcdonald.com.au\/wp-json\/wp\/v2\/media?parent=82"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kylemcdonald.com.au\/wp-json\/wp\/v2\/categories?post=82"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kylemcdonald.com.au\/wp-json\/wp\/v2\/tags?post=82"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}