Windows: Workstations with antivirus disabled (Built-in)

[NicholeKaligian]

The report below lists all Windows computers that have disabled antivirus

The report will only list assets that meet all of the following criteria:

• The asset state is set to "active".
  
• The asset has been successfully scanned at least once.
  
• The asset is a Windows asset.
  
• The asset is a workstation.
  
• The antivirus software is recognized by the Security Center on the client.
  
• The asset has disabled antivirus software detected.
  

Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tblAssets.Username,
  tblAssets.Userdomain,
  Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblAntivirus.DisplayName As AntiVirus
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
  Inner Join tblComputersystem On tblAssets.AssetID = tblComputersystem.AssetID
  Inner Join tblDomainroles On tblDomainroles.Domainrole =
    tblComputersystem.Domainrole
  Inner Join tblAntivirus On tblAssets.AssetID = tblAntivirus.AssetID
Where tblAssets.AssetID Not In (Select Distinct tblAntivirus.AssetID
  From tblAntivirus Where (Case
      When tblAntivirus.onAccessScanningEnabled <>
      0 Then 'Antivirus Enabled or Unknown'
    End) = 'Antivirus Enabled or Unknown') And tblState.Statename = 'Active' And
  tblDomainroles.Domainrolename In ('Stand-alone Workstation',
  'Member Workstation')
Order By tblAssets.Domain,
  tblAssets.AssetName

[David_G]

Depending on the browser that you are using, or sometimes even the language of your operating system, it is possible that invisible characters are being copied along with the query. Could you please try pasting the query into a text editor prior to pasting it in the report builder. Make sure you clear the whole query window by selecting everything with Ctrl+a and deleting it, then pasting the complete query from your text editor into the window. More instructions for adding this report to your Lansweeper installation can be found here.

[Bryan6500]

Thanks. This is giving me an error however. All I am doing is copy/pasting it.

Invalid SELECT statement. Unexpected token "  Inner" at line 18, pos 1.: Unexpected token "  Inner" at line 18, column 1