Windows: High number of autorun items (Built-in)

[Daniel_B]

Old name: Autorun: High number of autorun items (Built-in)

The report below gives back a list of computers which have a high number of software automatically running after logon
The report will only list assets that meet all of the following criteria:

• The assets state is set to 'Active'
  
• The asset has been successfully scanned at least once
  
• The asset is a Windows computer
  
• The computers autorun contains more than 25 items

Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  Count(tblAutorun.AutorunID) As Total
From tblAssets
  Inner Join tblAutorun On tblAssets.AssetID = tblAutorun.AssetID
  Inner Join tblAutorunUni On tblAutorun.AutorunUNI = tblAutorunUni.AutorunUNI
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblState.Statename =  'Active'
Group By tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10),
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried
Having Count(tblAutorun.AutorunID) > 25
Order By Total Desc