Startup Applications History Audit
SoftwareDiscover which Startup apps are running on your devices along with the history of those startup applications so you know when new items get added or removed from devices in your environment. This overview offers multiple benefits, including optimizing performance by identifying and disabling unnecessary programs, managing system resources more effectively, enhancing security by detecting malware and potentially unwanted software, troubleshooting startup issues, protecting privacy by preventing unauthorized programs from running, customizing startup behavior to streamline the computing experience, cleaning up unnecessary entries to improve system efficiency, and ultimately reducing boot times for a smoother user experience.
This audit will give you an overview of all changes related to startup applications in the last 7 days.
Before running the audit, additional steps must be taken to enable history of the Autorun scan item. You can find the steps in Pro Tips 53
Due to a temporary issue, when using the copy button on the report below the > sign will be replaced by “>”. You can either replace it manually when pasting the code or open the dropbox and manually select the query
Startup Applications History Audit Lansweeper On-Prem Query
Select Top (1000000) tsysOS.Image As icon,
tblAssets.AssetID,
tblAssets.AssetName,
tsysOS.OSname,
tblAutorunUni.Caption As Application,
Case
When tblAutorunHist.Action = 1 Then 'Added'
When tblAutorunHist.Action = 2 Then 'Removed'
End As Action,
tblAutorunHist.Lastchanged As Date,
tblAssets.Domain,
tblAssets.Username,
tblAssets.Userdomain,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssets.Firstseen As [Created at],
tblAssets.Lastseen As [Last successful scan],
tblAutorunUni.CreationDate
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysOS On tblAssets.OScode = tsysOS.OScode
Left Outer Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblAutorunHist On tblAssets.AssetID = tblAutorunHist.AssetID
Inner Join tblAutorunUni On tblAutorunUni.AutorunUNI =
tblAutorunHist.AutorunUNI
Where tblAutorunHist.Lastchanged >= DateAdd(day, -7, GetDate()) And
tblAssetCustom.State = 1
Order By tblAssets.AssetName