UEMS using Win32_Product to scan for installed software?
I'm investigating an "issue" where Endpoint are reconfiguring software on a daily basis. It only happens on endpoint with the UEMS Agent installed.
My theory here is that UEMS queries WMI: Win32_Product to find installed software. This is very bad practice, as querying Win32_Product makes Windows do a consistency check of all applications installed by Windows installer, and will even repair of misconfigured installations.
I have not been successful in figuring out how to trace exactly what exactly is invoking this query, but as it only happens on my endpoint with UEMS, its a good start.
Please confirm whether UEMS does this, as it is very much not recommended.
explained here:
Use PowerShell to Find Installed Software - Scripting Blog [archived] (microsoft.com)
My theory here is that UEMS queries WMI: Win32_Product to find installed software. This is very bad practice, as querying Win32_Product makes Windows do a consistency check of all applications installed by Windows installer, and will even repair of misconfigured installations.
I have not been successful in figuring out how to trace exactly what exactly is invoking this query, but as it only happens on my endpoint with UEMS, its a good start.
Please confirm whether UEMS does this, as it is very much not recommended.
explained here:
Use PowerShell to Find Installed Software - Scripting Blog [archived] (microsoft.com)