Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 150
  • Last Modified:

Uninstalled Patches \ Software

Hi Everyone,

Does anyone know of a way of finding out when a patch was uninstalled and by whom in Windows 2008 R2 ?
0
CaussyR
Asked:
CaussyR
1 Solution
 
Phil BossmanCommented:
You may not be able to find out "Whom", but with some digging through the Event Logs, you should be able to find out "When".  

Open the Event Viewer and filter on the MsiInstaller source.  After you find the uninstall event you want, then you should look for "login events" to determine who was logged into the server at that time.

Windows Installer removed the product. Product Name: <product>. Product Version: <version>. Product Language: 1033. Manufacturer: <manufacturer>. Removal success or error status: 0.

Open in new window

0
 
CaussyRAuthor Commented:
Thank you
0

Featured Post

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now