cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Chara991
Engaged Sweeper

Hello guys!

I'm trying to make a report that gives me a list of all the assets without antivirus installed, the problem is that I want to remove Windows Defender and not take it as an antivirus, but I can't find a way to remove it. any ideas?

i have this query:

Select Top 1000000 tblAssets.AssetID,
tblAssets.IPAddress,
tblAssets.AssetUnique,
tblAssets.Username,
tsysOS.Image As icon,
tblAntivirus.DisplayName,
tblAssets.Lastseen,
tblAntivirus.ProductState
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysOS On tblAssets.OScode = tsysOS.OScode
Left Join tblADComputers On tblAssets.AssetID = tblADComputers.AssetID
Inner Join tblAntivirus On tblAssets.AssetID = tblAntivirus.AssetID
Where Not tblAntivirus.DisplayName = 'McAfee Endpoint Security' And
Not tblAntivirus.DisplayName = 'Windows Defender'
Order By tblAssets.AssetName

The thing is we want to migrate from McAfee to Crowdstrike and we want to make the deploy with LansWeeper, thats why i want this report, because i need a list with the assets without antivirus, but is impossible to take out Windows defender and get the assets without AV.

Thanks!

1 REPLY 1
brandon_jones
Champion Sweeper III

This is the report that I use to find systems that don't have certain software installed. Just put the name of your software in the place of Insert Software Name here.  You can also add the other fields that you need as well.

 

Select Top 1000000 tsysOS.Image As icon,
tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblAssets.Username,
tblAssets.Userdomain,
tblAssets.IPAddress,
tblAssets.Firstseen,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblAssets.AssetID Not In (Select Top 1000000 tblSoftware.AssetID
From tblSoftware Inner Join tblSoftwareUni On tblSoftwareUni.SoftID =
tblSoftware.softID
Where tblSoftwareUni.softwareName Like '%Insert Software Name Here%') And
tblAssetCustom.State = 1
Order By tblAssets.Domain,
tblAssets.AssetName