I have an issue where the user System is changing the Install Status of a VMware Virtual Machine from installed to decommissioned. How do I go about trying to track down what is causing this change? Is there a way to lookup what user system was doing at the time of the screenshot?
