Sales: 1.888.611.2288 | Support: 1.888.826.2288
User Reports
The Express PC Audit & Inventory Tool provides a detailed view of the user environment on your system including:
- Desktop configuration such as current user and screen saver configuration.
- Startup commands such as name and location.
- Network connections such as name, mapped drive letter, and state.
- Environment variables such as name and value.
Sample user report
Startup commands (Win32_StartupCommand)
Name
Command
Location
User
Adobe Gamma Loader.exe
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE
Common Startup
Public
atchk
"C:\Program Files (x86)\Intel\AMT\atchk.exe"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Public
DAEMON Tools Lite
"C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
HKU\S-1-5-21-52307591-1720405105-270368766-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MYCOMPANY\jsmith
Google Updater
C:\PROGRA~2\Google\GOOGLE~1\GOOGLE~1.EXE -systray -startup
Common Startup
Public
IAAnotif
"C:\Program Files (X86)\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Public
Sidebar
%ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NT AUTHORITY\NETWORK SERVICE
Sidebar
C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
HKU\S-1-5-21-2527036582-3992062883-3591373362-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
jmsmith-755\jsmith
Sidebar
%ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem
HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NT AUTHORITY\LOCAL SERVICE
swg
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
HKU\S-1-5-21-52307591-1720405105-270368766-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
MYCOMPANY\jsmith
Windows Defender
%ProgramFiles%\Windows Defender\MSASCui.exe -hide
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Public
WindowsWelcomeCenter
rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NT AUTHORITY\LOCAL SERVICE
WindowsWelcomeCenter
rundll32.exe oobefldr.dll,ShowWelcomeCenter
HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NT AUTHORITY\NETWORK SERVICE
Startup commands (Win32_StartupCommand)
| Name | Command | Location | User |
| Adobe Gamma Loader.exe | C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE | Common Startup | Public |
| atchk | "C:\Program Files (x86)\Intel\AMT\atchk.exe" | HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | Public |
| DAEMON Tools Lite | "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun | HKU\S-1-5-21-52307591-1720405105-270368766-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | MYCOMPANY\jsmith |
| Google Updater | C:\PROGRA~2\Google\GOOGLE~1\GOOGLE~1.EXE -systray -startup | Common Startup | Public |
| IAAnotif | "C:\Program Files (X86)\Intel\Intel Matrix Storage Manager\Iaanotif.exe" | HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | Public |
| Sidebar | %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem | HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | NT AUTHORITY\NETWORK SERVICE |
| Sidebar | C:\Program Files\Windows Sidebar\sidebar.exe /autoRun | HKU\S-1-5-21-2527036582-3992062883-3591373362-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | jmsmith-755\jsmith |
| Sidebar | %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem | HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | NT AUTHORITY\LOCAL SERVICE |
| swg | C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe | HKU\S-1-5-21-52307591-1720405105-270368766-1016\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | MYCOMPANY\jsmith |
| Windows Defender | %ProgramFiles%\Windows Defender\MSASCui.exe -hide | HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | Public |
| WindowsWelcomeCenter | rundll32.exe oobefldr.dll,ShowWelcomeCenter | HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | NT AUTHORITY\LOCAL SERVICE |
| WindowsWelcomeCenter | rundll32.exe oobefldr.dll,ShowWelcomeCenter | HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run | NT AUTHORITY\NETWORK SERVICE |
