Which user account installed this software?

Try:

get-wmiobject Win32_QuickFixEngineering | select HotFixID,InstalledBy


-----
Shay Levi
$cript Fanatic
http://scriptolog.blogspot.com

Hi,
I'm trying to figure out how to use PoSH to identify which user
account
installed several service updates to an application we run on a dozen
or
so Win2003 servers.

These service updates need to be removed by the user that installed
them in the
first place, there are many user accounts which might have done this,
so to save time
logging in and out potentially hundreds of times I thought that this
information might
be available as a property of some object somewhere.

I'd really appreciate a few pointers about how to go about this, if
it's even possible.

I know exactly where to find the update files etc .. but don't know
how to go about
exploring the .NET or COM footprint of the software.

Thanks,
Stuart

Hi Shay,
Thanks for this.

I probably didn't make it very clear in the OP that these updates are
not MS Hotfixes, they
are service updates to a 3rd party application. Hence they don't show
in QuickFixEngineering.

....But the "InstalledBy" property looks like EXACTLY what I need I
just have to know where to
point my variable at!

The updates are in C:\Program File\blah\blah

Thanks,
Stuart

Hhmm ...don't know if this is even going to be possible..I scanned the
registry for these updates and
while loads of matches were found there was nothing in the registry to
identify which user installed them.
Assuming that the registry is the only provider where this data might
have been located I'm out of luck!
Thanks anyway.
Stuart