Solved

Can we tell which users have installed which things?

Posted on 2014-04-19
3
196 Views
Last Modified: 2014-05-02
In Windows 2012 server, can we tell, from the event logs or other means, which users have installed which things? If not, is there something we could do to provide that information in the future?¿
0
Comment
Question by:bobox00
3 Comments
 
LVL 78

Expert Comment

by:David Johnson, CD, MVP
ID: 40010685
put the users as standard users, problem solved.
0
 
LVL 10

Accepted Solution

by:
Scott Thomson earned 500 total points
ID: 40010958
David that may not be the solution. they may need admin access to administer the network etc and then he might be trying to just see if they are installing unauthorised software.

Do you mean can you track them if they are installing software on the server or on just a regular workstation on the network.?
0
 

Author Closing Comment

by:bobox00
ID: 40037489
If one knows the day (or can guess), they can scroll through event viewer and look at the installation events. Event viewer shows usernames for each event. This is just a theory. I have used it to find out who did an installation, but I did notice what I described here.
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

What to do when Windows Update is not working correctly? What tools can I use to detect the cause of the malfunction problem? What does this numeric error code mean? These and other questions that you have been asking in the past are answered here (…
OfficeMate Freezes on login or does not load after login credentials are input.
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now