Kaseya Community

Home » Discussion Forums » z Old Forum - Archive » Monitor only full program installs and removals

Learn more about how AuthAnvil can protect and enhance your Kaseya experience

Similar Posts

Monitor only full program installs

by
on Apr 15, 2014

Monitoring only those applications shown in the Add/Remove Programs list?

by
on Jan 5, 2007

Add/Remove Programs list with version and Installed Date?

by
on Mar 7, 2018

Hide Agent install in add/remove programs

by
on Aug 17, 2011
  • Verified Answer

Audit/Monitor-ONLY Installation

by
on Dec 18, 2006
Details
  • 2 Replies
  • 0 Subscribers
  • Postedover 11 years ago

Monitor only full program installs and removals

  • LegacyPoster
    Posted by
    on Nov 6, 2009 6:53 AM
    As far as we can see, Kaseya treats an upgrade to a program as though a new program was installed. We don't want to do that, as there are too many routine updates (including anti-virus and the like) to make such alerts useful. Is there any way to report only when a new program is installed, or when a program is totally deleted, not when a program is updated (and possibly deletes some of its files in the process)?

    Thank you!

    Legacy Forum Name: Monitor only full program installs and removals,
    Legacy Posted By Username: Kayza
  • LegacyPoster
    Posted by
    on Nov 6, 2009 10:53 AM
    Kaseya simply looks for new or updated files with the .exe extension. This can be useful but it does lack a certain focus. It doesn't exclude recently installed Microsoft updates etc. Here's a few ideas:


    1. Consider disabling .exe checking in some directories:
      2. [INDENT]Under Monitor->Alerts. Select Application Changes from the Select Alert Function drop down. You can now exclude one or more directories from being checked for the .exe files. However, this also means a brunch of mal-ware .exe files could hide there without your even knowing.[/INDENT]

    2. Use the Windows uninstall list:
      3. [INDENT]Create a script to dump the uninstall section of the registry. Get the file and have it alert you if it has changed. This will only tell you about "installed or removed items" but it won't tell you exactly which item(s) were added or removed without some form of file comparision. Plus all Windows Updates will be in this list unless you have a way to filter them out.[/INDENT]


    Good luck,

    Matt

    Legacy Forum Name: How-To,
    Legacy Posted By Username: connectex
  • admiralnorman
    Posted by
    on Apr 15, 2014 5:30 PM

    /bump

    Looking for an update to this post, or a post that is similar. My search ability is failing me.