How can I know if an app has been uninstalled?


  1. Posts : 163
    Windows 10
       #1

    How can I know if an app has been uninstalled?


    If you suspect someone has installed then uninstalled an app, I guess there must be some way to know. I wonder if there's any Event Viewer trace left for this.

    Any help much appreciated

    Windows 10 20H2
      My Computer


  2. Posts : 43,204
    Win 10 Pro (22H2) (2nd PC is 22H2)
       #2

    Partly. If the MSI Installer is used a log is written.

    E.g.
    How can I know if an app has been uninstalled?-1.png

    There you can see the SID and an event ID.

    Success Center
    Resolution

    Windows logs has several different events when you install or uninstall software. All of these events appear in SEM as the SoftwareInstall event type. Here are a few details on each operation's events:


    • Installation events can have an Event ID of 11707 or 1033. The InstallOperation field of these events indicate Installation completed.
    • Uninstallation events can have an Event ID of 11724 or 1034. The InstallOperation field of these events indicate Removal completed.

    Here's how to use the Event Viewer:
    How to check software installation and uninstall by event viewer - Gkhan Tips

    More: see e.g.
    How to Detect Who Installed What Software on Your Windows Server

    https://social.technet.microsoft.com...m=winservergen
      My Computers


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 23:14.
Find Us




Windows 10 Forums