LabTech Support Forums

Ticket/ Solution question

This forum is for discussion of ticket related issues.

Moderator: jware.connectwise

Ticket/ Solution question

Postby creynoldstx.gmail » Tue Sep 02, 2014 11:19 am

I have a Windows Server 2008 agent that is issuing a Windirstat install/uninstall ticket. Sometimes it is installed, sometimes uninstalled.

The problem lies is that I am supposed to be the only one with the password and no one should be accessing this server.

At first I thought we got hacked and I promptly changed the password, but now it has happened again. Out of the blue.

I don't know what actions to take here to 1.) determine whether someone is accessing the server without my knowledge and 2.) determine whether the agent is reporting this issue correctly. For 2.) I have seen the agent report on some workstations that software was removed and then reinstalled even though the user didn't do anything.

I don't know enough about labtech on how to configure this.

Any suggestions?

Thanks
creynoldstx.gmail
Newbie
Newbie
 
Posts: 1
Joined: Tue Jul 15, 2014 8:12 am

Re: Ticket/ Solution question

Postby earndt.labtechsoftware » Mon Sep 08, 2014 6:32 pm

You might check the Script and Commands tab of one of these agents and look at what LabTech might have been sending to the agent at the time the application was supposedly installed/uninstalled. Some third party integrations like Ninite use windirstat and might be leveraging it via script.
User avatar
earndt.labtechsoftware
LabTech Support Engineer
LabTech Support Engineer
 
Posts: 33
Joined: Sat Jul 06, 2013 12:45 am


Return to Ticketing

Who is online

Users browsing this forum: No registered users and 1 guest

cron