Avatar of Doodad Boy
Doodad Boy
Flag for Malaysia asked on

How to identify the login id used to install a application

Some abnormal application installed. Found in control panel. How we may determine who(which ID) installed these
Windows OSWindows Server 2008

Avatar of undefined
Last Comment
Shaun Vermaak

8/22/2022 - Mon
Scott Silva

Logs should show when it was installed. Best practice is to not allow regular users to install anything.

Then when you find when it was installed, look for who was logged in then.
ASKER CERTIFIED SOLUTION
Sam Simon Nasser

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Shaun Vermaak

Assuming the actual installer triggered events or wrote a log. The event log might have been overwritten too.

You can get the installed date by looking at the folder creation.
All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck