I have a Windows Server 2008 agent that is issuing a Windirstat install/uninstall ticket. Sometimes it is installed, sometimes uninstalled.
The problem lies is that I am supposed to be the only one with the password and no one should be accessing this server.
At first I thought we got hacked and I promptly changed the password, but now it has happened again. Out of the blue.
I don't know what actions to take here to 1.) determine whether someone is accessing the server without my knowledge and 2.) determine whether the agent is reporting this issue correctly. For 2.) I have seen the agent report on some workstations that software was removed and then reinstalled even though the user didn't do anything.
I don't know enough about labtech on how to configure this.