Kaseya Community

Monitor only full program installs and removals

  • As far as we can see, Kaseya treats an upgrade to a program as though a new program was installed. We don't want to do that, as there are too many routine updates (including anti-virus and the like) to make such alerts useful. Is there any way to report only when a new program is installed, or when a program is totally deleted, not when a program is updated (and possibly deletes some of its files in the process)?

    Thank you!

    Legacy Forum Name: Monitor only full program installs and removals,
    Legacy Posted By Username: Kayza
  • Kaseya simply looks for new or updated files with the .exe extension. This can be useful but it does lack a certain focus. It doesn't exclude recently installed Microsoft updates etc. Here's a few ideas:


    1. Consider disabling .exe checking in some directories:
    2. [INDENT]Under Monitor->Alerts. Select Application Changes from the Select Alert Function drop down. You can now exclude one or more directories from being checked for the .exe files. However, this also means a brunch of mal-ware .exe files could hide there without your even knowing.[/INDENT]

    3. Use the Windows uninstall list:
    4. [INDENT]Create a script to dump the uninstall section of the registry. Get the file and have it alert you if it has changed. This will only tell you about "installed or removed items" but it won't tell you exactly which item(s) were added or removed without some form of file comparision. Plus all Windows Updates will be in this list unless you have a way to filter them out.[/INDENT]


    Good luck,

    Matt

    Legacy Forum Name: How-To,
    Legacy Posted By Username: connectex
  • /bump

    Looking for an update to this post, or a post that is similar. My search ability is failing me.