You can turn on event auditing, through the group policy editor to log every instance of a program being run and then filter the results from the system log using a third-party tool. The exact event you would be looking for is "Audit process tracking," which tracks all executables. Be sure to turn this on for both failure and success to get the most comprehensive logging possible.
Related Q&A from Serdar Yegulalp
This week, our expert answers the question of how to get DVD data off a disc, even if the user's PC doesn't have an optical drive.continue reading
This week, our expert answers a question on how to connect a phone or tablet to a USB drive with a micro-USB connector.continue reading
Open source and free suites such as LibreOffice and OpenOffice could save organizations money, but not effort in comparison with Microsoft Office.continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.