Avatar of T.J.
T.J.
 asked on

Determine Date and Who Installed a Role or Feature

I'm finding some roles and features installed on servers that should not be there. Things like remote access and IIS for example. I'm trying to determine when they were installed and what user was logged in to do it?

I've played around with some powershell commandlets that show the installed features but I can seem to find who did it and when they did it. This is on server 2012 R2.

Thanks for suggestions.
Windows Server 2012

Avatar of undefined
Last Comment
Will Szymkowski

8/22/2022 - Mon
SOLUTION
Seth Simmons

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Scott C

Is there anything in the Event logs?  Try installing a benign role or service and see if anything shows up there.

If not, I'm not sure what if anything you can do to find out.  Administrators are supposed to be able to be trusted and follow the rules and protocols.
ASKER CERTIFIED SOLUTION
Will Szymkowski

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck