Centralised Software Removal

["james () infosec co im" <security.advice () gmail com>]

Hi

Have uncovered a bunch of "undesirable" software on a number of
Windows XP machines within a MS Active Directory Domain.  There is
quite a lot...

Rather that visit each and every machine, to un-install the software,
I'm looking for a centrally controlled mechanism to achieve this.

i.e. Someone with Domain Admin rights, can scan the machines, identify
un-authorised or un-wanted software, and then remove it remotely.

Does anyone know of any tools, commercial or otherwise that will achieve this?

And yep, first step is to remove local admin rights of the offenders,
to make sure it don't happen again.

Thanks in advance for your help


JM