I am using the following report to find computers that do not have sophos antivirus installed.
We are seeing false positives on computers that have other errors preventing service enumeration
(e.g. WMI errors, DNS problems)
Is there a good way to modify similar reports so that they won't return these false positives?
First thing that comes to mind would be to modify the where statement with a count > 1
SELECT Computername, Username, Lastseen
FROM dbo.tblComputers
WHERE (Computername NOT IN
(SELECT Computername
FROM dbo.tblServices
WHERE (Caption = 'Sophos Anti-Virus')))