Startup Applications History Audit

Software

Discover which Startup apps are running on your devices along with the history of those startup applications so you know when new items get added or removed from devices in your environment. This overview offers multiple benefits, including optimizing performance by identifying and disabling unnecessary programs, managing system resources more effectively, enhancing security by detecting malware and potentially unwanted software, troubleshooting startup issues, protecting privacy by preventing unauthorized programs from running, customizing startup behavior to streamline the computing experience, cleaning up unnecessary entries to improve system efficiency, and ultimately reducing boot times for a smoother user experience.

This audit will give you an overview of all changes related to startup applications in the last 7 days.

Before running the audit, additional steps must be taken to enable history of the Autorun scan item. You can find the steps in Pro Tips 53

Due to a temporary issue, when using the copy button on the report below the > sign will be replaced by „>“. You can either replace it manually when pasting the code or open the dropbox and manually select the query

Startup Applications History Audit Lansweeper On-Prem Query

Select Top (1000000) tsysOS.Image As icon,
  tblAssets.AssetID,
  tblAssets.AssetName,
  tsysOS.OSname,
  tblAutorunUni.Caption As Application,
  Case
    When tblAutorunHist.Action = 1 Then 'Added'
    When tblAutorunHist.Action = 2 Then 'Removed'
  End As Action,
  tblAutorunHist.Lastchanged As Date,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssets.Firstseen As [Created at],
  tblAssets.Lastseen As [Last successful scan],
  tblAutorunUni.CreationDate
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysOS On tblAssets.OScode = tsysOS.OScode
  Left Outer Join tsysIPLocations On tsysIPLocations.LocationID =
      tblAssets.LocationID
  Inner Join tblAutorunHist On tblAssets.AssetID = tblAutorunHist.AssetID
  Inner Join tblAutorunUni On tblAutorunUni.AutorunUNI =
      tblAutorunHist.AutorunUNI
Where tblAutorunHist.Lastchanged >= DateAdd(day, -7, GetDate()) And
  tblAssetCustom.State = 1
Order By tblAssets.AssetName

Show

Hide