Abstract: A method and system detects changes to the computers on a computer network, and reports these changes in a simple and useful format. Two compatible components are used, including a Local Agent that runs locally on each computer, and a Digester that is run centrally by a system administrator. Changes in the system are detected and classified, and a report is produced that arranges data from several tables for different types of entities detected on the computers into a work order format for output to a text file. Any entities that are new and correspond to previously identified flagged exceptions are so identified, and any new unknown entities that were not previously found on a computer in the network are indicated so that they can be evaluated. Changes that may be undesirable can thus be readily identified for evaluation and possible removal before indicated by other third party sources.