Endpoint Protection

Hi,

I'm planning my deployment of the SEP trough my environment, mostly trough a GPO.

I create my install settings with the following setting on;  "Automatically uninstall competitive software".
I export my package with the correct settings and tell the system not to create a single exe.
The files are placed on a share with access for all computers / users.
The GPO is created; based on WMI to select the correct architecture (32 or 64) and execute the msi.
The GPO forces the computer to perform the gpo before allowing the user to continue.

After a couple of minutes the system has correctly installed the SEP.
But the old antivirus is still there, I Then have to manually remove the old AV before rebooting; otherwise the system fails to boot !

The AV has no password to unload / uninstall.

I checked the folder where the msi is located; under the folder "..\Symantec Endpoint Protection 32 bit\AppRemover" there is a file named
supported products. In this file I find trend micro "10.".
In our environment we have 10.5.
Could this be the problem? Does I need to add 10.5 to the file?

Is it possible to uninstall competitive software trough a gpo ?

Setup:
Windows XP's (32bit)
Windows 7 (32 & 64bit)
Trend Micro 10.5 (current)
SEP 12.1 (future)

Thank you !
Domien

...you have a non-english installation do you?  The AppRemover only uninstalls the english version of Trend at this time:

http://www.symantec.com/docs/TECH178757

Hello,

Which version of SEP 12.1 are you trying to deploy via GPO?

I would recommend you to Deploy the SEP 12.1 RU1 MP1 as there is a third-party security software removal feature. Check this Article:

http://www.symantec.com/docs/TECH178757

Trend Micro OfficeScan Client 10.x is supported for Uninstallation.

Also, check this Article:

Installing clients with Active Directory Group Policy Object

http://www.symantec.com/docs/HOWTO55426

Hope that helps!!

We are using the English version of Trend Micro 10.5.

But we are using localised Windows OS's.
We have dutch, French and English installs running; some installed from a localised install cd and some from an EN install with a languagepack on them.

Information on Locale Support

• Uninstalling an English product in a localized environment is supported, unless explicitly stated otherwise in the table. Any attempts to uninstall an unsupported, non-English product will fail gracefully.

• All localized products in the above list can be removed when the OS language is the same as the product language.

would this mean I can only uninstall on the EN machines? (and the ones with an native English OS ?)
Is there a way we can see why the uninstall fails? 

Thank you !

Could you please copy/paste uninstall log? It should be located into Temp folder and named SEP_AppRemover.log.

...I personally don't think this would work pushing the client via GPO.

I've tested this over here, and running the msi to install SEP completely skips the AppRemover task 

I can't find that file anywhere on the c drive.
I've checked

      C:\Temp
      C:\Windows\Temp
      C:\Users\ddc\AppData\Local\Temp
      C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Temp

Would this mean that the AppRemover was never triggered?

Edit:
the version we're installing is the:   12.1.1101.401 RU1 MP1
I created the package with the correct install settings; remove competitor software.
Under the folder where the msi is located there is a folder named "AppRemover".

So I think everything was done correctly.

From what you've described, the package you've created sounds fine.  The only thing I can suggest would be to push this out as a startup script to call setup.exe rather than the msi.

Like I say, my own testing seems to suggest AppRemover is not called when installing SEP using the msi.

Hi,

Just to follow up on this; 

I then tried to manually install the SEP trough the management console; this also did not seem to work. 
I gave full admin rights; I used a correct package; UAC was turned off, ... 
=> I find the lack of overview after deploying a package to a client really disapointing
=> And also the lack of error reporting; you have to go to the machine and search the eventlogs...

I'm now deploying the software using the SEPprep.exe tool.
This is pushed trough a desktop management tool we use here, this seems to work fine.

This is far from the easy install procedure that was advertised !

Mvg,
Domien