How to show computers that don't have an application installed

You can use PDQ Inventory and PDQ Connect to quickly find computers missing a specific application. This guide shows how to build dynamic groups and collections to track uninstalled software across your devices.

How do I find computers without an app using PDQ Connect groups?

In PDQ Connect, use dynamic groups with filters to find devices missing a specific application. In Connect, collections are called groups. We use filters to organize devices in our fleets and ultimately fill those groups with devices. For folks switching from Inventory to Connect, here’s your terminology cheat sheet:

• (Inventory) Filters = (Connect) Filters

• (Inventory) Collections = (Connect) Groups

Filters and groups in PDQ Connect

Filters and groups in PDQ Connect help you dynamically track which computers are missing key software, such as antivirus. If the terms feel murky, this KB article about filters and groups in PDQ Connect explains them.

Let’s dive into how to create a group in PDQ Connect using antivirus software as an example. And good news: If you’ve ever had to hop into regedit, you’re already two steps ahead of the rest of the class!

1. From the PDQ Connect console, click Devices. Then, click Create group.

   

   Once you click Create group, you’ll see the Create group dialog box.

2. In the Create group dialog box, enter a name for your group. Here, we’ve chosen Antivirus.

3. Under Type, select either Dynamic or Static. Dynamic groups filter devices in real time as their parameters change (e.g., antivirus is installed). Static groups remain the same. (More on static vs. dynamic groups in a separate blog.) For that reason, we recommend using a dynamic group here.

4. Next, determine your filtering logic. Here’s where your knowledge of regedit — and that IT 101 class you took years ago — come in handy. We use the OR, AND, NOR, and NAND operators to help filter devices.

   • In this example, we don't need to use filtering logic to get the results we need. But just in case your environment warrants using filtering logic, let's briefly cover an example. To see the devices that don’t have antivirus installed in our sample instance, we could use one operator: AND. We could ask PDQ Connect to show us all the devices where the Name field is not empty. Then, we'd use the AND operator to tack on a stipulation: These devices with something in the Name field must also have software named Sophos (antivirus) installed. 

5. Enter your filtering logic and antivirus of choice into the respective fields in the dialog box. Afterward, click Create.

   

And there you have it! A shiny new group shows you which computers don’t have antivirus installed.

How do I find computers without an app using PDQ Inventory?

Dynamic collections in PDQ Inventory let you find computers that are missing specific software by using filters and variables

If you have the Enterprise version of PDQ Inventory, you already have access to several collections that group by this type of information. If we open up the Collection Library and double-click on the Chrome Enterprise (Not Installed) collection, we can see how the filter works. If you don't have Enterprise, no sweat. Here's a screenshot so you can follow along.

Alright, let's unpack what's going on here.

First, we have an All filter, meaning computers need to match all subfilters to be included in the collection.

Next, we have a Not Any filter. This filter looks through the applications installed on your systems to ensure Not Any of them match the value in the Value column. The Value column of this filter uses the system variable $(AppNameGoogleChrome). If we click on Options > Variables in PDQ Inventory, we can see the value of that variable is Google Chrome.

Finally, we have an All filter that returns only computers that have been scanned.

We can use this collection as a template to create our own dynamic collection. For this example, I’ll make a collection that filters for computers that don't have Malwarebytes installed — but know you can swap that out for any application.

1. Click New Dynamic Collection.

   

2. Give your collection a name.

3. Here are the filter settings we'll be using. Replace Malwarebytes with the application of your choice.

   

4. Click OK when finished.

Your new collection should appear in the menu tree. Click on the collection and review the members to ensure the filter works properly.

I know that THOR is the only computer in my environment that doesn't have Malwarebytes installed, so our collection is working perfectly.

How do I build a "not installed" collection using an existing one?

You can also build a "not installed" collection by inverting an existing collection of devices with the app installed. This method is especially useful if you already have a collection built containing computers that do have the application installed. Essentially, we can create a collection for computers that are NOT members of this existing collection.

Let's look at an example.

Here, I have a collection that filters for computers that do have Malwarebytes installed. 

1. Now, let's create our opposing collection. Click New Dynamic Collection.

2. Give the collection a name.

3. Set up the following filters, and change the value to match the collection you want to filter against.

That's all there is to it. Again, this method is quick and easy if you already have a collection built that filters for computers with the specified application installed.

Collections and groups that filter for computers with missing applications are incredibly useful, especially when auditors come snooping around your network.

A quick note for PDQ Inventory users: To get the most out of your collections, make sure you regularly scan your systems. Collections are only as accurate as your most recent scan.