I am running XP FR3 SP4 on windows 2000. Someone keeps installing Google Tool Bar add in for internet explorer. I keep on uninstalling it.
I need to lock down the server tighter obviously but am wondering if there is a way I can find out which user installed it.
Now when new log ons are completed, everyone is getting the message the the install was successful.
Thanks in advance
Matt
I'm not sure if the google toolbar writes anything to the event log when it is installed, but I would start there. Check the application event logs.
I haven't installed the google toolbar, but if it creates a folder like C:\program files\googletoolbar\ look and see who the owner of that folder is.
Just a couple ideas.
Thanks, I did check the ownership and there is no individual listed, just groups....
I think I may have figured it out . I think someone was prompted to upgrade a flsh plug in, it must have installed the tool bar at the same time.
I need to ensure my firewall blocks .msi and.exe files coming in.
Thanks for you help
You need to be an admin to install the toolbar, so I call a witch hunt on all admins
--Emil