Find All Windows Computers with Disabled Antivirus on Your Network
This audit provides an easy way to locate security issues quickly. Antivirus software can be disabled for various reasons, but it is important to find the ones that are disabled before you can start troubleshooting as to why they were disabled in the first place. This report provides an easy overview of all machines on your network that currently have their antivirus disabled and that require attention.
Workstations with Antivirus Disabled Report
Select Top 1000000 tblAssets.AssetID, tblAssets.AssetName, tblAssets.Domain, tblAssets.Username, tblAssets.Userdomain, Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon, tblAssets.IPAddress, tsysIPLocations.IPLocation, tblAssetCustom.Manufacturer, tblAssetCustom.Model, tsysOS.OSname As OS, tblAssets.SP, tblAssets.Lastseen, tblAssets.Lasttried, tblAntivirus.DisplayName As AntiVirus From tblAssets Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype Inner Join tsysIPLocations On tsysIPLocations.LocationID = tblAssets.LocationID Inner Join tblState On tblState.State = tblAssetCustom.State Left Join tsysOS On tsysOS.OScode = tblAssets.OScode Inner Join tblComputersystem On tblAssets.AssetID = tblComputersystem.AssetID Inner Join tblDomainroles On tblDomainroles.Domainrole = tblComputersystem.Domainrole Inner Join tblAntivirus On tblAssets.AssetID = tblAntivirus.AssetID Where tblAssets.AssetID Not In (Select Distinct tblAntivirus.AssetID From tblAntivirus Where (Case When tblAntivirus.onAccessScanningEnabled <> 0 Then 'Antivirus Enabled or Unknown' End) = 'Antivirus Enabled or Unknown') And tblState.Statename = 'Active' And tblDomainroles.Domainrolename In ('Stand-alone Workstation', 'Member Workstation') Order By tblAssets.Domain, tblAssets.AssetName