Scheduling a task using powershell to restart a windows service on basis of Event ID 20227

Ashish Kumar Arya 41 Reputation points
2021-04-15T15:23:03.487+00:00

Scheduling a task using powershell to restart a windows service on basis of Event ID 20227.

This is to restart the IKE and AuthIP IPsec Keying Modules service when the machine gets connected to the LAN and this will disconnect the VPN connection.

Please help. Thanks.

Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,389 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ian Xue (Shanghai Wicresoft Co., Ltd.) 30,376 Reputation points Microsoft Vendor
    2021-04-16T05:48:21.72+00:00

    Hi,

    You can copy the event filter XML of the trigger from the Task Scheduler.
    88405-image.png

    To create a trigger you can refer to Cathersal's reply from the below link
    https://social.microsoft.com/Forums/Azure/en-US/3882c805-be26-416c-b636-8502d3fb877f/eventtriggered-task-via-powershell?forum=Offtopic 

    $CIMTriggerClass = Get-CimClass -ClassName MSFT_TaskEventTrigger -Namespace Root/Microsoft/Windows/TaskScheduler:MSFT_TaskEventTrigger  
$Trigger = New-CimInstance -CimClass $CIMTriggerClass -ClientOnly  
$Trigger.Subscription =@"  
<QueryList>  
  <Query Id="0" Path="Application">  
    <Select Path="Application">*[System[Provider[@Name='RasClient'] and (Level=1  or Level=2) and (EventID=20227)]]</Select>  
  </Query>  
</QueryList>  
"@  
$Trigger.Enabled = $True   
$Action = New-ScheduledTaskAction  -Execute 'Powershell.exe' -Argument "-ExecutionPolicy RemoteSigned -Command $Command"  
Register-ScheduledTask -Action $Action -Trigger $Trigger -TaskName "  Startup"  -Description 'test' -User 'System' -Force

    Best Regards,
    Ian Xue

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments