Link to home
Start Free TrialLog in
Avatar of Doodad Boy
Doodad BoyFlag for Malaysia

asked on

How to identify the login id used to install a application

Some abnormal application installed. Found in control panel. How we may determine who(which ID) installed these
Avatar of Scott Silva
Scott Silva
Flag of United States of America image

Logs should show when it was installed. Best practice is to not allow regular users to install anything.

Then when you find when it was installed, look for who was logged in then.
Avatar of Sam Simon Nasser
Sam Simon Nasser
Flag of Palestine, State of image

Link to home
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Assuming the actual installer triggered events or wrote a log. The event log might have been overwritten too.

You can get the installed date by looking at the folder creation.