Software Installation Warning

[Rookcr]

Good day,

Is there a software package that can be centrally managed by our IT department that would warn of any software installation on a W2k Desktop? We have roughly 100 machines and a time clock program only runs if the user has admin rights. We currently use trackit but that only runs once per week and I would like to add another layer of protection if possible. If anyone knows of anything please respond. I would greattky appreciate it or if you can point me to the right forum!!

Thank you in advance.

The Rookie

 

[rgzimmer]

Coupldn't you use a group policy setting to prohibit software installs?

 

[Rookcr]

I could but I have not figured out a good way to have the time clock application update if they do not have the rights. As well as we have many updates that we send instructions for the end user to install. I am open to any ideas on how to get around this problem.

 

[Zelandakh]

have you looked at visual audit pro, gasp, track-it and net octopus? there are plenty more - like hundreds, but those i know track software.

if you are a mac user check out mac supervisor.

 

[Rookcr]

Well I am really looking for something realtime. So when the install begins I am notified. I don't believe these products do this as of yet....Any other ideas?????

 

[MikeKap]

SysTrack 3.1 can be configured to alert you of software installations, removals and upgrades. The software does many other things too. Though not realtime (which would chew up considerable overhead) SysTrack could be configured to monitor and detect HW/SW inventory changes as often as ecery 6 minutes. You can configure SysTrack to notify you of these changes via page, e-mail, SNMP and pop-up message - even if the person was off-site (at home). It is pretty amazing. Let me know if you would like to see a free trial.

Kapski@yahoo.com

 

[Rookcr]

Thank you Mike Kap, I will give it try.

 

[MikeKap]

The SysTrack 3.1 trial copy is only available via the Lakeside Software ftp site, at this time. If you e-mail me directly I will sent you the link and login instructions. I prefer not to post the id and password on this forum.

 

[Rookcr]

Where do I find the trial.

 

[MikeKap]

I can e-mail you the link to the ftp site including a userid and password to access the trial. SysTrack v3.1 is in the final stages of beta testing which is why we have it on a protected ftp site. Once we begin shipping production code you will be able to download it directly from our website at

http://www.lakesidesoftware.com.

If I publish the ftp site with userid and password, we may get too many downloads and we are not prepared for that with beta code. I hope you understand. If you would rather wait for the production code, it should be available on our website the 2nd week in July. Best regards.

 

[Zelandakh]

Mike - be careful how you present this. Sounds like you are the maker? That's kind of selling - not allowed!

 

[MikeKap]

I always take extreme caution when responding to postings on this site. When someone "asks specifically" for a software package as Rookcr did in his initial posting I feel compelled to advise him of something that will help him. Especially when others have tried to help him and they could not. If I have offended you I am sorry. I always avoid "selling".

Regards,
Mike

 

[Zelandakh]

Just trying to avoid you get red flagged to site management for selling - I think what you put above was safe as it was a request for help which is therefore not selling...

Will let you know if I see something that may be interpreted as a sales pitch.

 

[DanMc]

I think Mike's on solid ground. I promote my favorite products on here all the time. I don't sell them or make money off them. I'd be upset if he was on tech tips to push his products, but it looks like he was here as an answer guy, not a sales guy.

Back to the initial question: If you give your users admin access, then they will always be able to go around any management product that resides on their system. You can try to hide it, but eventually someone will figure it out. Some apps are very hard to "make work" as a user, but you can hammer almost everything in if you work at it. WinXP has even more tools to help make apps run as a user.

First, try giving the user full rights to C:\WINNT, C:\Program Files, and HKEY_LOCAL_MACHINE. Almost every app will run as a user with these settings. Now you need to whittle back the rights to see what the minimum needed is.
Take away C:\Program FIles, and grant C:\Program Files\TimeClock and see if that works.

A lot of apps (expecially older ones) all they need full access to "C:\Program Files\AppName" and "HKEY_LOCAL_MACHINE\Software\Company\AppName"
Some also need rights to their INI files in C:\WINNT (but try not to grant rights to the WINNT folder, just give rights to the 1 or 2 files the app will modify)

 

[Roblu]

Hi!

Check out this link. It might help you out.

http://www.specialoperationssuite.com/products/softwaremanager/default.asp

Regards
/Roblu

 

[lbreimyer]

Personally, I use Pedestal Software INTACT for real-time monitoring of desktops and workstations. It will notify you of any new software installations in real-time and even allow you to automatically block the installation if you so desire. It's very comprehensive and powerful.

I would recommend downloading it first before committing to buying it. It happens to be reasonably priced, but it's always a good idea to test software before spending any money...

 

[Rookcr]

Thank you. I will try both. I am looking but not for a nother month or so. CLoser to year end