Security Basics mailing list archives

Re: Centralised Software Removal


From: "Mark Owen" <mr.markowen () gmail com>
Date: Mon, 3 Nov 2008 12:43:30 -0500

On Fri, Oct 31, 2008 at 6:53 AM, james () infosec co im
<security.advice () gmail com> wrote:
i.e. Someone with Domain Admin rights, can scan the machines, identify
un-authorised or un-wanted software, and then remove it remotely.

Does anyone know of any tools, commercial or otherwise that will achieve this?

Try running the following VBScript through a GP on machine start.
Alternatively, you could run this script against each machine
individually.

```START```
strComputer = "."

Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_Product
WHERE Name='Application Name as shown in ADD/REMOVE Programs' ")

For Each objItem in colItems
     objItem.Uninstall
Next
```END```


-- 
Mark Owen


Current thread: