First we need to enable logging for the Windows Task Scheduler, open Event Viewer (Put “eventvwr.msc” in Run) and browse to TaskScheduler as below.
Right click the Operational log and click properties and ensure the “Enable Logging” is checked
Windows is now setup to log Scheduled tasks to the Event Viewer, now we need to setup a scheduled task.
Open Task Scheduler and Create a “New Basic Task”
Create a task with a relevant name, ensure the task is run as the “SYSTEM” user and Run with highest privileges ticked.
Create two triggers as below with Event ID’s 329 and 111
Create an action to send an email as below using an smtp server which whitelists this server and only allows internal emails