Windows Server Login Alert

I could make one that looks like that!

First, you'd need a new e-mail template, probably something like:

User $DestinationAccount has attempted to login to server $DestinationServer.

The login attempt was $Result.

Then you'd need two rules, one for successes (based off correlating UserLogon events) and one for failures (based off correlating UserLogonFailures).

Rule A would have a text constant to populate $Result = "successful" and Rule B would have a text constant to populate $Result = "unsuccessful"

Awesome! Thanks curtisi!  I'll try that!

I'd need to RDP in, but that's a rule. 

You can even report on it and have it sent to you via an email to the time of your choice.