Manual - Event Mail Notification

Contents

  1. Introduction
  2. System Requirements
  3. Purchase and Licensing
  4. Installation
  5. Configuration
    1. Recommended configuration approach
    2. Querying the Windows Event
    3. Query interval
    4. SMTP function
    5. Email recipients
    6. Sending test emails
    7. General contact
    8. Program activation / license
    9. Specific settings
    10. Proxy configuration
  6. Usage
  7. Troubleshooting
  8. Updates
  9. Support & Contact

 

Introduction

Event Mail Notification is a Windows service that monitors Windows events and sends email notifications. You can be notified about up to three different events with the corresponding IDs. Event Mail Notification includes SMTP functionality that provides a limited number of emails to be sent. You may also use your own mail server via SMTP for unrestricted use. The included free SMTP function does not apply to the Ultimate version.

 

System Requirements

Operating System: Windows 11, Server 2019+
.NET Framework: 4.8 or higher
512 MB RAM

Internet:

  • required for SMTP, port 465/587
  • required for license verification and activation, port 443

Optional:

SMTP account with login credentials (for sending emails using your own server)

Note:

The Windows service Event Mail Notification requires the necessary permissions to read Windows events and is installed under the system context.

 

Purchase and Licensing

You can purchase Event Mail Notification via our website with the corresponding license: https://www.eventmailnotification.com. Here you can also find tips on how to use the program.

The license models are available for different usage scenarios, have a duration of one year, and do not renew automatically. This is not a subscription. Before a license expires, you will be notified by email and can decide whether you want to purchase a new one. For single licenses, computer activation can be released at any time in the customer area.

An upgrade function for our license models does not exist. If you have licensing questions, feel free to contact our support (see Support & Contact).

License Models

Event Mail Notification – Trial

License 

3 Days

Subscription 

No

Operating System 

Windows

Host System 

Clients

Computer 

StandAlone

Clients 

1

Framework 

.NET 4.8

Mail SMTP 

own, inclusive

Updates 

No

Language 

DE, EN

 

Event Mail Notification – Standard

License 

1 Year

Subscription 

No

Operating System 

Windows

Host System 

Clients

Computer 

StandAlone

Clients 

1

Framework 

.NET 4.8

Mail SMTP 

own, inclusive

Updates 

Yes

Language 

DE, EN

 

Event Mail Notification – Professional

License 

1 Year

Subscription 

No

Operating System 

Windows

Host System 

Clients, Server

Computer 

StandAlone, Domain

Clients 

1

Framework 

.NET 4.8

Mail SMTP 

own, inclusive

Updates 

Yes

Language 

DE, EN

 

Event Mail Notification – Ultimate

License 

1 Year

Subscription 

No

Operating System 

Windows

Host System 

Clients, Server

Computer 

StandAlone, Domain

Clients 

unlimited

Framework 

.NET 4.8

Mail SMTP 

own

Updates 

Yes

Language 

DE, EN

Current license information for the installed program is available during the license period under the Windows events of Event Mail Notification itself.

 

Installation

The installation of Event Mail Notification is simple and flexible. The setup supports both a graphical user interface (GUI) and a silent installation for automated deployments. Both variants offer the same functionality and are optimized for different deployment scenarios. The installation file is available in the customer area of our website after purchasing Event Mail Notification.

Note:

For installations where a previous version already exists, the program configuration is automatically adopted during setup. Update installations are fully automated, including configuration adoption.

Two installation routines are available for installing Event Mail Notification, both requiring administrative rights:

1. Conventional installation via setup program (GUI)

The setup program guides you through the installation using a graphical interface. The program is deployed with default settings. On newer versions of Windows, changes to Start menu entries (names/icons) may only become visible after signing out and back in, or after restarting the computer.


2. Specific or automated installation via Console/PowerShell (Silent)

Silent installation (Unattended Setup)

Supported parameters

/VERYSILENT  - Completely without user interface (no dialogs)
/SILENT      - Minimal interface (progress bar), no interaction
/SUPPRESSMSGBOXES - Suppresses all message boxes (error dialogs, etc.)
/NORESTART   - Prevents automatic restart after installation
/RESTART     - Forces restart after installation
/DIR="path"  - Define installation directory
/GROUP="name" - Define Start Menu folder
/LOG="path"  - Write installation log

Example: /DIR="C:\Program Files\Event Mail Notification"

Examples for silent installation of Event Mail Notification

EventMailNotification_X-X-X.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /LOG="C:\Temp\EMN_Setup.log"

EventMailNotification_X-X-X.exe /SILENT /DIR="D:\Tools\EventMailNotification" /GROUP="Event Mail Notification"

Note:

For installations where a previous version already exists, the program configuration is automatically adopted during setup. Update installations are fully automated, including configuration adoption.

The Windows service is deployed under the system context, configured for automatic start, and started. After installation, a sample configuration is available. This includes a non-functional example license. Since the license is not valid, the service is stopped again. You can find the productive configuration options of Event Mail Notification in the Configuration section.

 

Configuration

To configure Event Mail Notification productively for your needs, the configuration file EventMailNotification.config is provided as an XML file in the program directory C:\Program Files\Event Mail Notification. A configuration template named Example_EventMailNotification.config is also provided in the same directory.

The configuration file contains the following settings (XML segments). Since version 1.3.x, the event configuration was extended so that up to three different event queries can be monitored in parallel.

Recommended configuration approach

  1. Enter activation (serial) and mail recipients first.
  2. Then test the first event query with logevent1/logid1.
  3. Add optional queries logevent2/logid2 and logevent3/logid3 afterwards.
  4. Finally configure SMTP mode (internal/external), enable test mails, and restart the service.

Note: Changes become active on the next service start. Check the entries in Event Viewer under Event Mail Notification.

Querying the Windows Event

<log>
  <logevent1>Microsoft-Windows-Windows Defender/Operational</logevent1>
  <logid1>1116</logid1>
  <logevent2></logevent2>
  <logid2></logid2>
  <logevent3></logevent3>
  <logid3></logid3>
  <loglasttime>60</loglasttime>
  <lasteventonly>false</lasteventonly>
</log>

❗ Mandatory field

With logevent1/logid1 you define the primary event query. Optional queries can be added with logevent2/logid2 and logevent3/logid3.

loglasttime defines the event window in minutes. With lasteventonly=true, only the latest event per configured query is sent.

Query interval

<timer>
  <timertime>60</timertime>
</timer>

❗ Mandatory field

timertime defines the polling interval in minutes. Supported range: 5 to 1440 minutes.

SMTP function (own mail server)

<smtp>
  <smtpserver>smtp.example.com</smtpserver>
  <smtpport>587</smtpport>
  <smtpuser>This email address is being protected from spambots. You need JavaScript enabled to view it.</smtpuser>
  <smtppassword>password</smtppassword>
  <smtppassencryption>false</smtppassencryption>
  <smtpencryption>TLS</smtpencryption>
</smtp>

✔️ Optional

smtppassencryption=false means plaintext password. smtppassencryption=true means an encrypted value (created with SmtpPassEnc.exe) that is decrypted on service startup.

Email recipients

<mail>
  <mailtoemail>This email address is being protected from spambots. You need JavaScript enabled to view it.</mailtoemail>
  <mailtoname>Example User</mailtoname>
  <mailccemail></mailccemail>
  <mailccname></mailccname>
</mail>

❗ Mandatory field

At least one primary recipient must be configured. CC is optional.

Sending test emails

<testmail>
  <sendtestmailemn>true</sendtestmailemn>
  <sendtestmailsmtp>true</sendtestmailsmtp>
</testmail>

❗ Mandatory field

sendtestmailemn controls monthly EMN test emails. sendtestmailsmtp controls SMTP startup test emails.

General contact (shown in email)

<contact>
  <contactorganisation>Example Contact Organisation</contactorganisation>
  <contactperson>Example Contact Person</contactperson>
  <contactphone>+12 3456 7890</contactphone>
  <contactmail>This email address is being protected from spambots. You need JavaScript enabled to view it.</contactmail>
</contact>

❗ Mandatory field

Program activation / license

<activation>
  <serial>YOUR-SERIAL-HERE</serial>
</activation>

❗ Mandatory field

Specific settings

<settings>
  <language>en</language>
  <beta>false</beta>
</settings>

❗ Mandatory field

Proxy configuration

<proxy>
  <enabled>false</enabled>
  <useSystem>true</useSystem>
  <url>http://proxy.example.local:8080</url>
  <username></username>
  <password></password>
  <bypassOnLocal>true</bypassOnLocal>
  <noProxy>*.intranet.local;10.0.0.0/8</noProxy>
  <socks>
    <enabled>false</enabled>
    <type>SOCKS5</type>
    <host>proxy.example.local</host>
    <port>1080</port>
    <username></username>
    <password></password>
  </socks>
</proxy>

❗ Mandatory field

 

Usage and additional tools

Under Start / Program / Event Mail Notification, the following features are available:

AV Test

  • Simulates a threat scenario on your Windows system by creating a text file containing the EICAR test string (test virus) under C:\Temp. For more information, see https://www.eicar.com. This allows you to test whether Event Mail Notification is working correctly and sending emails.

Links to Event Mail Notification

Documents

  • Manual
  • License

Tools

  • Service Configuration (open configuration file)
  • Service Configuration Example (open example configuration file)
  • Service Control (control the Windows service via cmd)

 

 

Troubleshooting

For analyzing issues with Event Mail Notification, you can use the program’s own event entries. These are visible in the Windows Event Viewer under Applications and Services Logs / Event Mail Notification. The logs provide an overview of the following processes:

  • Licensing
  • Activation
  • Configuration
  • Update
  • Proxy usage
  • Email quota (Trial, Std., and Pro when using internal SMTP)
  • Event queries (up to 3 configurable events)
  • License-expiry information notice (daily email limit)

For event monitoring, also verify the configuration entries logevent1/logid1, and optionally logevent2/logid2 as well as logevent3/logid3.

These logs are very helpful and also assist support inquiries.

 

Updates

Each time the Windows service Event Mail Notification starts, it checks for updates. If an update is available, it is downloaded automatically and installed in the background. All existing configuration settings are retained, and the service restarts afterward. This process is seamless and usually not noticeable to the user. If you want to see update history or the currently installed version, you can find this information in the Event Viewer under Applications and Services Logs / Event Mail Notification.

The latest release notes and changes for Event Mail Notification can be found on our website: https://www.eventmailnotification.com/en/software/releasenotes

 

Support & Contact

Our support is available by email or ticket system for the following Event Mail Notification topics:

  • General
  • Development
  • Licensing
  • Feedback

You can reach us at:

Website
www.eventmailnotification.com

Support (login required)
www.eventmailnotification.com/en/account/support

If you would like to leave feedback or have suggestions for improvement, feel free to contact us via the Support page. We would also appreciate your rating or comment on the purchased version.