My client wants to get an email alert any time anyone logs on via SBS 2011 Remote Web Access.
I know I can setup an alert from within Event Viewer, but I don't know if there is a unique EventID which definitively indicates a Remote Logon.
1. Does anyone know if there is such an EventID, and if so what it is?
2. Is there any reason to choose the Event Viewer approach over doing it with eventtriggers.exe?