We're currently going through a process of using Qualys scans to find security vulnerabilities on Windows servers in our enterprise.
We are finding quite a number of older Windows applications on our servers that we think are being installed by SCCM.
Some examples of this are:
EOL/Obsolete Software: Microsoft VC++ 2005 Detected Microsoft
Foundation Class Library Remote Code Execution Vulnerability (MS11-025)
How can we find out which Windows applications have dependencies and which applications can be removed on our Windows machines?