Re: How to find out which domain account installed software on shared machine
From: Steven L Umbach (n9rou_at_nscomcast.net)
Date: 05/26/04
- Next message: Steven L Umbach: "Re: Winlogon.exe error and then reboot"
- Previous message: Steven L Umbach: "Re: access rights"
- In reply to: j: "How to find out which domain account installed software on shared machine"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 26 May 2004 00:07:14 GMT
Your best bet would be to look at the folder/executeable file and check who
is the owner in security page/advanced - owner. A better solution may be to
use Group Policy [gpedit.msc on local computer] to enforce Internet Explorer
web content zone settings and use Software Restriction Policies to manage
what users can install on a computer [ XP Pro]. SRP are very powerful once
you figure them out though the end users will hate you if you care. The link
below may be helpful. --- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;310791
"j" <anonymous@discussions.microsoft.com> wrote in message
news:1244d01c4428f$7fc3c730$a001280a@phx.gbl...
> Thanks for the reply,
> Here's the issue:
> When I reformatted the box last monday, I did a clean
> install of XP. Today, one week later, the end-users are
> complaining of pop-ups, slow/erratic performance etc.
> Basically, within that last week, there were various
> applications (i.e. AOL service, various web toolbars,
> spyware, adware etc). I have a computer use policy that
> explicity forbids the installation of 'third-party'
> software, and now I must enforce this policy. I checked
> event logs, and it gave me who was using AOL on the
> machine, but that's all, under Event Viewer -> System.
> Under Event Viewer -> Application, when the source is
> MsiInstaller, user value is N/A. So:
>
> 3 users/ 1 Windows XP machine
> Windows 2003 domain
> I have a list of what unauthorized software is present on
> the machine - is there a way to backtrack, and find out
> which user installed it?
>
- Next message: Steven L Umbach: "Re: Winlogon.exe error and then reboot"
- Previous message: Steven L Umbach: "Re: access rights"
- In reply to: j: "How to find out which domain account installed software on shared machine"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
