Video Screencast Help
Scheduled Maintenance: Symantec Connect is scheduled to be down Saturday, April 19 from 10am to 2pm Pacific Standard Time (GMT: 5pm to 9pm) for server migration and upgrades.
Please accept our apologies in advance for any inconvenience this might cause.

Monitoring of user applications

Created: 24 Oct 2012 • Updated: 25 Oct 2012 | 7 comments
This issue has been solved. See solution.

I'm looking for a way of monitoring a users machine for applications or programs they are running. Say if they were online gaming in work etc, is there a way to find out if that machine was placed in it's own group? So the program/application could be blocked?

Comments 7 CommentsJump to latest comment

Ashish-Sharma's picture

Hi

Check this artical

Monitoring the applications and services that run on client computers

http://www.symantec.com/business/support/index?page=content&id=HOWTO55218

Configuring the management server to collect information about the applications that the client computers run

http://www.symantec.com/business/support/index?page=content&id=HOWTO55219#v40608257

 

You can perform several tasks to set up and use learned applications.

Table: Steps to monitor the applications

Steps

Description

Enable learned applications

Configure the management server to collect information about the applications that the client computers run.

See Configuring the management server to collect information about the applications that the client computers run.

Search for applications

You can use a query tool to search for the list of applications that the client computers run. You can search on application-based criteria or computer-based criteria. For example, you can find out the version of Internet Explorer that each client computer uses.

See Searching for information about the applications that the computers run.

You can save the results of an application search for review.

See Saving the results of an application search.

Note:

In some countries, it may not be permissible under local law to use the learned applications tool under certain circumstances, such as to gain application use information from a laptop when the employee logs on to your office network from home using a company laptop. Before your use of this tool, please confirm that use is permitted for your purposes in your jurisdiction. If it is not permitted, please follow instructions for disabling the tool

 

Thanks In Advance

Ashish Sharma

 

 

Mithun Sanghavi's picture

Hello,

Check this Article:

Monitoring the applications and services that run on client computers

http://www.symantec.com/docs/HOWTO55218

You can use a query tool to search for the list of applications that the client computers run. You can search on application-based criteria or computer-based criteria. For example, you can find out the version of Internet Explorer that each client computer uses.

See Searching for information about the applications that the computers run.

You can save the results of an application search for review.

See Saving the results of an application search.

Also, check these Articles below:

What format are the learned application logs in SEP? Where could we find it on the computer?

http://www.symantec.com/connect/forums/what-format-are-learned-application-logs-sep-where-could-we-find-it-computer

VIDEO: Learned Application : SEP 11

http://www.symantec.com/connect/videos/learned-application-sep-11

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

GeoGeo's picture

Hmmm interesting I've been running the learn applications on a specific machine in a group for 24 hours now. When I do a search for applications it returns nothing and I know the machine has definetly been on line within the last 24 hours.

Could this be that the manager is on RU12 MP1 while the client is on RU6 MP1 could this cause an issue?

Please review ideas and vote there could be something useful :)

https://www-secure.symantec.com/connect/security/ideas

 

Mithun Sanghavi's picture

Hello,

I don't think that should matter. Could you try migrating 1 client to the Latest version of SEP 12.1 and check.

Secondly, also check this Thread: https://www-secure.symantec.com/connect/forums/sep-12-learn-applications-communication-settings

Hope that helps!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Ashish-Sharma's picture

HI,

I think it will be take time if you don't received any log try to upgrade sep client and check again.

Thanks In Advance

Ashish Sharma

 

 

_Brian's picture

See this:

https://www-secure.symantec.com/connect/forums/sea...

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

GeoGeo's picture

It's started to work once I upgraded the users machine to RU12 looks like SEPM and client have to be on same version. client version 11 doesn't log on a SEPM version 12.

Please review ideas and vote there could be something useful :)

https://www-secure.symantec.com/connect/security/ideas

 

SOLUTION