Home page logo

basics logo Security Basics mailing list archives

Re: Centralised Software Removal
From: "Mark Owen" <mr.markowen () gmail com>
Date: Mon, 3 Nov 2008 12:43:30 -0500

On Fri, Oct 31, 2008 at 6:53 AM, james () infosec co im
<security.advice () gmail com> wrote:
i.e. Someone with Domain Admin rights, can scan the machines, identify
un-authorised or un-wanted software, and then remove it remotely.

Does anyone know of any tools, commercial or otherwise that will achieve this?

Try running the following VBScript through a GP on machine start.
Alternatively, you could run this script against each machine

strComputer = "."

Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_Product
WHERE Name='Application Name as shown in ADD/REMOVE Programs' ")

For Each objItem in colItems

Mark Owen

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]