how to find out who installed software

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I'm trying to figure out who installed Firefox on Windows 2000 server. There
are few users with administrative privileges to that server. Firefox is
listed in Ad/Remove programs. Is there a way to determine who installed the
software?
Thank you.
 
I'm trying to figure out who installed Firefox on Windows 2000 server. There
are few users with administrative privileges to that server. Firefox is
listed in Ad/Remove programs. Is there a way to determine who installed the
software?
Click to expand...

Don't multi-post, please.
 
I believe undated was that multi-posting (same thing separately
to multiple NGs) is quite different from cross-posting (one post
addressed to multiple NGs).
Cross-posting, when needed/appropriate, keeps all responses
in one thread and does not cause multiple downloads of the same.
 
Since it was likely and admin looking at the Owner of the files
would probably be useless, but sometimes Owner Creator
grants on the install point does leave a trace in the security
grant settings of the files.
 
As Roger mentioned take a look at the ownership of the folder for that
application and also look at the time the folder was created which may
provide a clue. You could then look in the security log for logon/account
logon events and their corresponding time/dates that may help you narrow the
list of suspects. You could also try giving administrators deny NTFS
permissions to the program folder after enabling auditing of object access
and enabling auditing on the folder to see if you can flush out the user if
he attempts to change permissions to gain access to it again and also audit
the executabe file for the program. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;300549 --- enable
folder auditing.
 
Back
Top