Windows server 2016 patching

Question

Hi,

I was looking for the way to know which user has installed windows patch in my windows server 2016?

Need help.

Thanks and Regards

Prasad

Answer 1

Hello @PrasadWF ,

There is no straightforward method to know which user launched the update.

The best option would be to check the WindowsUpdate.log in order to check when the update was installed (allow a 5 minute under-over frame) and check in the Security Event log to see which users had logged into the system prior to the installation.

----------------------------------------------------------------------------------------------------------

Hope this helps with your question,
--If the reply is helpful, please Upvote and Accept as answer--

Answer 2

Hi @PrasadWF ,

There is no such event that is written to the event log that records which user installed an update.'
There are third-party auditing tools which may help you with this, you may have a look into the post below for more auditing options:
How to Detect Who Installed What Software on Your Windows Server

----------

If the reply was helpful please don't forget to upvote and/or accept as answer, thank you!

Best regards,
Leon