Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Possible Duplicate:
Tracking who installed Software on server.

Hello, I'm trying to figure out a way, on how to find who (username) installed specific program, which appears in the "Add/Remove Programs" of the Windows 2003 server. Is there a way to do it?

Edit: There is no event logs available to check through, what I'm looking for is a similar behavior as:

wmic qfe

Which lists the user, that installed the patch. Not always, since some patches appear as installed by the system, however still for manually installed patches, there are indication for the username.

share|improve this question

marked as duplicate by jscott, Chopper3 Feb 18 '11 at 16:22

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

up vote 1 down vote accepted

I don't believe that's built into Windows. You could try gleaning information from the logfiles, see if there's any installation logs, or search for the installer if it was a program downloaded and saved to a particular home directory or see whose account "owns" the file. Basically you will have to try piecing together other evidence to see who most likely did it.

share|improve this answer
Please see addition to the question. – Vick Vega Feb 18 '11 at 16:31

Not the answer you're looking for? Browse other questions tagged or ask your own question.