Monitoring the applications and services that run on client computers

The Windows client monitors and collects information about the applications and the services that run on each computer. You can configure the client to collect the information in a list and send the list to the management server. The list of applications and their characteristics is called learned applications.
You can use this information to find out what applications your users run. You can also use the information when you need information about applications in the following areas:
  • Firewall policies
  • Application and Device Control policies
  • SONAR technology
  • Host Integrity policies
  • Network application monitoring
  • File fingerprint lists
The Mac and Linux clients do not monitor the applications and the services that run on those computers.
You can perform several tasks to set up and use learned applications.
Steps to monitor the applications
Enable learned applications
Configure the management server to collect information about the applications that the client computers run. See:
Search for applications
You can use a query tool to search for the list of applications that the client computers run. You can search on application-based criteria or computer-based criteria. For example, you can find out the version of Internet Explorer that each client computer uses. See:
You can save the results of an application search for review.
In some countries, it may not be permissible under local law to use the learned applications tool under certain circumstances, such as to gain application use information from a laptop when the employee logs on to your office network from home using a company laptop. Before your use of this tool, please confirm that use is permitted for your purposes in your jurisdiction. If it is not permitted, please follow instructions for disabling the tool.