How to find out which domain account installed software on shared machine

From: j (anonymous_at_discussions.microsoft.com)
Date: 05/25/04 

Date: Tue, 25 May 2004 12:35:56 -0700

Thanks for the reply,
Here's the issue:
When I reformatted the box last monday, I did a clean
install of XP. Today, one week later, the end-users are
complaining of pop-ups, slow/erratic performance etc.
Basically, within that last week, there were various
applications (i.e. AOL service, various web toolbars,
spyware, adware etc). I have a computer use policy that
explicity forbids the installation of 'third-party'
software, and now I must enforce this policy. I checked
event logs, and it gave me who was using AOL on the
machine, but that's all, under Event Viewer -> System.
Under Event Viewer -> Application, when the source is
MsiInstaller, user value is N/A. So:

3 users/ 1 Windows XP machine
Windows 2003 domain
I have a list of what unauthorized software is present on
the machine - is there a way to backtrack, and find out
which user installed it?

Relevant Pages

  • Re: Reboot several times a day
    ... I was using either RAID 0 or 1; one controller on the MB the other was ... > Running programmes written long before the introduction of Windows XP ... clean install of XP on new hard drives and ... >> as far as the id in the event viewer is concerned. ...
    (microsoft.public.windowsxp.general)
  • Re: black screen of death after windows load
    ... What version of Windows XP do you have? ... The drivers for this device are not installed. ... normally the add hardware wizard tried to install the drivers for the card ... You can access Event Viewer by selecting Start, Administrative Tools, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: svchost.exe error
    ... It was not sensible to install the SP3 update when you had an existing ... System and Application logs in Event Viewer for the last boot. ... I also got a svchost.exe error right at the windows splash screen ... reinstalled service pack 2 when I rebooted after it had finished I ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Install / Reinstall / Recovery Console causes shut down
    ... install does it behave like this.. ... issue with a hardware driver in the windows file structure. ... defrag and open the recovery console.. ... View and Manage Event Logs in Event Viewer in Windows XP ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: "Invalid Connection Data" Message XBOX 360 acting as an MCE
    ... Application Event Viewer had this Event: ... The capture using netcap has been sent. ... Install the Windows XP Service Pack 2 Support Tools from the following ...
    (microsoft.public.windows.mediacenter)