Skip to main content
Skip table of contents

Shadow IT


Shadow IT is a term often used to describe IT systems and IT solutions built and used inside organizations without explicit organizational approval. Find out more about Shadow IT on Wikipedia.

It is in the interest of any organization from a management perspective to know which Shadow IT tools, if any, are being used by users. This library pack contains metrics with conditions that are configured to detect specific applications that are being used unofficially by active users within your IT environment. You'll also find metrics that aim to return a list of applications that are generating the most web traffic. This will help you in further understanding which applications are most in use.

This information will also help you in understanding the behavior of your users not just by looking at which applications are most in use, but how they are used. For example, included in this pack are metrics that allow you to determine if proxies and even tools like tor are being used by users in your IT environment. If, for example, you're interested in finding out how much users are using tools and services that have been recommended for use under your organization's policies, you can do that with this pack.

Included in the pack by default are metrics that allow you to retrieve a list of users that use a specific application for a specific purpose. These metrics have been separated into groups by use case. For example:

Data storage

These metrics when executed, return a list of users using storage applications such as OneDrive, Dropbox, Google Drive, Copy, and Box.

Conferencing and VoIP

These metrics when executed, return a list of users using VoIP applications such as Lync, Skype, GoToMeeting, Webex, and Google Talk.


These metrics when executed, return a list of users using productivity applications such as Office 365, Google Docs, Evernote, Basecamp, iCloud.


These metrics when executed, return a list of users using business applications such as Salesforce, Concur, Netsuite, Workday, Marketo


This pack requires Nexthink Version 6.20 or above.

Change log


Investigations have been removed from the pack because there were conditions that referenced Nexthink Enhance which is no longer supported.


References to Nexthink Enhance components have been removed from some metrics. As a result, some metrics have been removed or altered. Naturally, some dashboards have also been removed or altered to reflect the changes to the metrics.


Initial release.


No mandatory configuration is required.

The pack searches for a list of Shadow IT applications. Should you wish to search for different or additional applications within your organization, then the existing metrics within each folder of the Library Pack are searching for particular binaries or applications. Should you wish to search for a new application then the simplest mechanism is simply to Copy and then Paste the respective metrics and change the binary or application name to the new one you are searching. Of course, should you wish to see this in the Portal then a Widget must be created in addition.

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.