Windows Software Audit Tool

Audit the software configuration of your Windows servers and workstations

Keep a record of the software settings on your Windows servers and workstations with our network documentation tool XIA Configuration.

Check the software installed on all your Windows servers and workstations
Detect changes to the software configuration of your Windows machines
Audit which versions are installed across your environments

To see all the Windows settings supported by XIA Configuration, navigate up to Windows Machine >

Software information audited by XIA Configuration

Find out more about the software settings audited by XIA Configuration below:

Software Summary
.NET Framework
File System
Event Logs
Environment Variables
Installed Software
Internet Settings
ODBC Configuration
Operating System

PowerShell
Running Processes
Roles and Features
Startup Commands
Registry
Task Scheduler Library
Windows Services
Windows Time
WinRM Settings

Software Summary

Provides a summary of software related information.

Operating System Name
Service Pack
Number of Installed Programs
Number of Event Logs
Number of Environment Variables
Number of Scheduled Tasks

Screenshot of the Windows machine Software Summary in the XIA Configuration web interface

.NET Framework

Determine the .NET Framework versions installed.

Name/Version
Installed/Not Installed
Service Pack

Learn more >

Screenshot showing .NET Framework versions installed in the XIA Configuration web interface

File System

Retrieve information about files on your Windows machines.

Located
Full Path
File Size
Creation Date
Last Accessed & Modified
File Type
Hidden

Read Only
Encrypted
Compressed
File Hash
Security
NTFS Permissions
File Contents

Screenshot showing File details in the XIA Configuration web interface

Windows Event Logs

The Windows Event Log stores information about significant occurrences in the system or in a program in a log. The Event Log Service records application, security, and system events which can be viewed with Event Viewer. This can help identify, diagnose and predict system problems.

Document the Windows event logs.

Name
Creation Date
Filename
File Size
Maximum File Size
Number of Records
Overwrite Policy

Screenshot showing Event Logs in the XIA Configuration web interface

Windows Event Log Entries

Event ID
Type
Source
Message

Screenshot showing Event Log Entries in the XIA Configuration web interface

Environment Variables

Document environmental variables. Variables can be user based or SYSTEM variables which are accessible to all users.

Supported on Windows 2000 and above

Variable Name
User Name
Value

Screenshot showing Environment Variables in the XIA Configuration web interface

Installed Software

Check the software installed in Windows across your environments.

Name
Publisher
Platform
Version
Installation Date

Learn more >

Screenshot showing Installed Software in the XIA Configuration web interface

Internet Settings

View internet settings including system level proxy settings.

Internet Explorer Version
System Proxy Connection Type
Internet Explorer Enhanced Security Configuration

Screenshot showing Internet Settings in the XIA Configuration web interface

ODBC Configuration

Automatically detect information about 32bit and 64bit ODBC drivers and data sources with built in support for Microsoft SQL server, Oracle, MySQL and Microsoft Office ODBC drivers.

Drivers
ODBC Data Sources

Learn more >

Screenshot of Microsoft Access data source settings in the XIA Configuration web interface

Operating System

Automatically detect the following core operating system information:

Operating System

Operating System Name
Service Pack

General Information

Version Number
Operating System Architecture
Server Installation Type
Build Number
Build Type
Code Page
Country Code
Last Bootup Time
Install Date
Locale
MUI Languages
Operating System Language
Serial Number
Windows Directory
System Directory

Naming and Role

Domain / Workgroup Name
Domain / Workgroup Role
NetBIOS Name
Fully Qualified Domain Name

Timezone

TimeZone Name
Daylight Savings Time
Timezone Bias

Registry

Registry Size (Current)

Page Files

Name
Initial Size
Maximum Size

Screenshot of Operating System information in the XIA Configuration web interface

PowerShell

Check the PowerShell version on your Windows machines.

PowerShell Settings
Permissions
Audit Rules

Learn more >

Screenshot of PowerShell settings in the XIA Configuration web interface

Running Processes

View information about the processes that were running at the time of the scan.

Name
Description
Process ID (PID)
Parent Process ID
Command Line
Executable Path

Screenshot of Running Processes in the XIA Configuration web interface

Roles and Features

Document Windows server roles and features.

Supported on Windows Server 2008 and above.

Name
Parent Name
Install State

Screenshot showing Roles and Features in the XIA Configuration web interface

Desktop Optional Features

Document Windows Desktop optional features.

Display Name
Name
Install State

Screenshot showing Optional Features in the XIA Configuration web interface

Startup Commands

Audit the commands configured to run at startup.

Command
Location
User

Screenshot showing Startup Commands in the XIA Configuration web interface

Registry Keys and Values

Retrieve information about registry keys and values.

Registry Keys

Display Name
Hive
Located (True/False)
Values
Security
Permissions
Audit Rules

Registry Values

Display Name
Type
Value
Located (True/False)
Parent Key

Learn more >

Screenshot of Windows machine registry keys and values in the XIA Configuration web interface

Task Scheduler Library

The Task Scheduler Library automates tasks that perform actions at a specific time or when a certain event occurs and replaces Scheduled Tasks on previous versions of Windows.

The following information is retrieved on Windows Server 2008 and above:

General

Name
Task Path
Author
Enabled (True/False)
Hidden (True/False)
Version

Settings

Allow Task To Be Run On Demand
Run After Missed Scheduled Start
Task Failure Restart
Execution Time Limit
Force Terminate Tasks
Delete Expired Task
Multiple Instance Action

Conditions

Idle Duration
Disallow Start On Batteries
Stop Task When Going On Batteries
Wake Computer To Run Task
Network Requirement

Security

Account Name
Logon Type
Use Highest Privileges

Execute Action

Command
Arguments
Working Directory

Trigger

Summary
Delay Task
Repetition
Stop Tasks At Repetition Duration End
Execution Time Limit
Activate Task
Activate Task (Synchronize)
Task Expiry
Expire Task (Synchronize)
Enabled (True/False)

Note: The information retrieved from operating systems below Windows Server 2008 varies from the above.

Screenshot of Scheduled Task settings in the XIA Configuration web interface

Windows Services

Audit your Windows services settings.

Name
Description
Advanced Information
Dependencies
Log On Account Name
Recovery Options

Learn more >

Screenshot of a Windows Service in the XIA Configuration web interface

Windows Time

Document your Windows Time service settings.

Active Directory Domain Role
Service Information
Global Settings
Client Settings
Server Settings

Learn more >

Screenshot of Windows Time service settings in the XIA Configuration web interface

WinRM Settings

Windows Remote Management (WinRM) is the Microsoft implementation of the WS-MAN management protocol, and the underlying communication technology used by PowerShell remoting.