Try using an agentless auditing software like SecurityExpressions. You can then audit his workstation without installing any software on his machine - everything from registry keys, users/groups, permissions, rights, passwords, patch management, identify unauthorized software including those...