How can we report on user-based program/app installs?

Tried searching for this and didn't come up with anything useful.

We have a need to track installations of "user-based" programs on Windows 10 machines such as OneDrive, Teams, etc.

Those don't currently show up in the Software Inventory for a node and I'm assuming that's because that's only looking at "machine-based" / system-wide installed programs.

Is there any way to include the user-based programs in the Software Inventory? If not, is there a different way to report on this?

Find more posts tagged with

software inventory

asset inventory

Accepted answers

All comments

serena

Have you checked whether those products are appearing under the Win32_Product namespace? https://support.solarwinds.com/SuccessCenter/s/article/WMI-queries-and-permissions-that-must-exist-for-SAM-component-credentials-to-work

Try using query Select * FROM Win32_Product

If you don't find it there, you could try reporting under a different namespace using https://documentation.solarwinds.com/en/Success_Center/SAM/Content/SAM-WMI-Monitor-sw3341.htm or

or perhaps reporting on the existence of a file related to onedrive http://www.solarwinds.com/documentation/en/flarehelp/sam/content/sam-file-existence-monitor-sw4755.htm

If you'd like to see improvements, would appreciate you creating a feature request https://thwack.solarwinds.com/t5/Server-Application-Monitor-SAM/idb-p/sam-feature-requests

mgaciarz

These applications do not show up in Win32_Product. Assuming that's because they're user-specific.

File existence monitor does seem like a viable option though a bit of a "brute force" method.

I did look into other WMI queries I could use to get this info. It looks like it's not directly available through WMI but it is in the registry (

HKEY_USERS\*\Software\Microsoft\Windows\CurrentVersion\Uninstall). There is no way to monitor the registry directly from SolarWinds right?

I guess there is a way to get registry values through WMI (using the StdRegProv class) but based on this (somewhat catty) thread, it looks like it can't be done with just a simple WQL query... Anyone know otherwise?

FWIW, I did put in a feature request as I think having this in the Software Inventory without jumping through extra hoops would be super-useful.