How to check software installation and uninstall by event viewer
In the application log Event IDs 11707 and 11724 will let you know installation removal of software’s .
Event ID 11707 tells you when a install completes successfully, and also the user who executed the install package.
1- Go to Event Viewer
2- Click on Windows Logs > Application
3- On the Right side Actions pane Click on Filter Current Log
4- On the popup window type the event id which you are looking for
Event Type: Information
Event Source: MsiInstaller
Event Category: None
Event ID: 11707
Date: 11/9/2006
Time: 3:21:45 PM
User: DOMAIN\USER
Computer: COMPUTERNAME
Description:
Product: Event Archiver Enterprise — Installation operation completed successfully.
Event ID 11724 tells you when a software package is removed successfully, again logging the user behind the operation.
Event Type: Information
Event Source: MsiInstaller
Event Category: None
Event ID: 11724
Date: 11/12/2007
Time: 7:50:13 PM
User: DOMAIN\USER
Computer: COMPUTERNAME
Description:
Product: Event Archiver Enterprise — Removal completed successfully.