Keeping track of the softwares being installed on my PC with the date

[johnpau80]

We wanted to keep track of the softwares which are being installed on our servers(manually or automatically).

Most of the time we have been getting some errors or issues
on the server and we break our head for 3-4 hours and then figure out that its because of an update to the windows OS or some JRE patch update which has caused this over night .

So I am looking for a software or a tool which will show me all the softwares/patches installed on my PC with date and time. Windows add/remove doesnt give me much info. Any 3rd party tool is also good for me

--Thanks
SAM

 

[longhair]

johnpau80,
you should be able to set the windoze autotmatic update to download the patch but not update until you say so.
a google of '"windows"+"automatic updates"' will give you pages of ideas.
regards,
longhair

 

[johnpau80]

Its not just the windows updates, sometimes users install
something on there PC's without my knowledge(network admin)
and get into several issues.

Atleast when I know the one which is being installed lastly
(drivers,patches..etc) then I have a clue if that might
have caused some issues..

 

[longhair]

johnpau80,
1) what the *&#%^%^& are users doing installing software on a server? only admins should have access to a server.
2) if the issue is pc's then restrict the users. they should log into the network as users not as admins or powerusers. this will severly restrict what they can put on a pc.
regards,
longhair

 

[porkchopexpress]

Agreed. Use restricted groups to remove them from the administrators group then they won't be able to install.

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

 

[johnpau80]

Thanks guy.


But is there a tool which will keep track of each of every
installation done on a PC. (including patches...etc)

 

[longhair]

johnpau80,
you could try to use the event service.
but again, if you restrict the users and set auto updates to download but not install you will have to check a lot less frequently.
regards,
longhair

 

[porkchopexpress]

Well the event log will tell you about anything that uses Windows Installer and i think SMS will tell you this information as well. I think the onlt real way for you to acheive this would be to use a third party security product.

The best way is to prevent them installing by restricting rights, or make it part of the companys acceptable use policy that they aren't allowed to then you can report them to HR and have them reprimanded.

 

[longhair]

right with you porkchopexpress.
what johnpau80 seems to be missing is that there should not be an issue with non approved installs at all. the users should not be allowed to install and if they do, as you put it they need to be reported. if windoze auto updates are configured correctly then the patches will not install until a sys admin does so manually. this gives you time to test on a non critical system before installing on a production one.
following the above first, and i'm assuming winnt - 2k - 2k3 - xp as the os because of this forum the user will not be able to install anything except for mildly annoying web stuff.
johnpau80 - since the users can install on the pc's & servers - what would happen if someone installed a back door virus that opened your network to the world?
regards,
longhair

 

[johnpau80]

OK LOOKS LIKE I HAVE TO AGREE WITH EVERYONE.

TO LOCK DOWN ALL USERS PC..

 

[porkchopexpress]

I'm pretty sure Policy Central will do what you want, we used it for a while but it's not cheap. Certainly not as cheap as removing admin rights from users.

http://forensicsoftware.co.uk/FSL_PCE_Corporate.htm

You said you had problems with users installing on the servers are your users Domain Admins?