Suppose I have Win 7 PC (called this PC1). Suppose a user plugged in a thumb drive containing a portable application into PC1 and run this portable application. Is there a way to check for a list of portable applications which user has run on PC1? Thanks.

Hi, As far as i know, Built-in tool cannot achieve your purpose. Best Regards.Spencer TechNet Community Support

I think AppLocker can achieve this. Just configure AppLocker to use audit mode and if a user opens executable file in usb flash drive, Win 7 will create a log. I think this is problem with Applocker. (Please correct me if I am wrong.) The problem is that if a company is using it as enforcement mode and if I add a new rule for denying usb flash drive exe file, it will deny user from running usb flash drive exe file. I can't configure AppLocker to have existing rules as enforcement and the new rule for usb flash drive exe file as auditing.

I think AppLocker can achieve this. Just configure AppLocker to use audit mode and if a user opens executable file in usb flash drive, Win 7 will create a log. I think this is problem with Applocker. (Please correct me if I am wrong.) The problem is that if a company is using it as enforcement mode and if I add a new rule for denying usb flash drive exe file, it will deny user from running usb flash drive exe file. I can't configure AppLocker to have existing rules as enforcement and the new rule for usb flash drive exe file as auditing.