Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

How can I remotly uninstal SEP 12.1?

Created: 05 Apr 2013 | 7 comments

I've pushed out the client to a Windows XP system but it isn't working correctly. I want to do a silent remote uninstall and clean of SEP 12.1 from her machine then reinstall the client. Can anyone point me in the right direction on how to silently uninstall SEP 12.1 off her system, clean her system of any residual remains of the install/SEP software. Then push out the software again. All with just having the user reboot once at then end of uninstalling the software.

If I go to the local machine I'd be able to go into add remove programs and uninstall, put in the password and have it uninstall then run the cleanwipe tool. But I want to do those steps remotely. Thanks for any help.
 

Comments 7 CommentsJump to latest comment

.Brian's picture

You could try the competitive uninstall tool mentioned in this KB article

Methods for uninstalling Symantec Endpoint Protection

Article:TECH184988  |  Created: 2012-03-27  |  Updated: 2012-05-30  |  Article URL http://www.symantec.com/docs/TECH184988

 

It may also be possible using psexec

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

DarrenChar's picture

Thank you, I've tried to run it to uninstall but I didn't have any luck. I renamed the sepprep32 to setup.exe and I edited the .ini file and changed these lines and added one.

[Settings]
ShowGUI=N
ShowMessageBox=N
MessageBoxText=Prepairing your system for Symantec Endpoint Protection 11.0.  During this process other antivirus products will be removed.\n\nIf you are prompted please fully remove these products.
AutoRunAfterUILoads=N
AskBeforeRemoval=N
SilentMSIInstaller=Y
RemoveSymantec=Y
CheckDiskSpace=Y
ResumeAfterReboot=Y
EnableLogging=Y
LogPath=
RunBeforeRemoval=
RunAfterRemoval=

[UninstallPaths]
SOFTWARE\McAfee\ePolicy Orchestrator\Application Plugins

[ProductNames]
;Programs that must be removed first
Symantec Endpoint Protection

So I tried to set it to silent install, and RemoveSymantec set to Y and I added the Symantec Endpoint Protection to the Product names.

I used the SEP Management to push out and have the setup.exe run on the computer. It doesn't look like it uninstalled anything though. So I'm not sure what to do so I can do a silent uninstall. I am also not sure if the fact that we need a passsord to remove SEP locally on a machine is making it so I can't do a remote uninstall.

Thanks again for any input.

.Brian's picture

Can you remove the password?

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

DarrenChar's picture

I think I might be able to uncheck it and update the policy. Since it affects all users I didn't want to but I will give it a shot, remove the password, try the uninstall, readd the password requirement.

Thank you.

W007's picture

Hello,

If you have remove sep uninstall password you can try to remove for PsExec command.

Follow these steps to get Uninstall Strings.

  1. Start->RUN->Regedit
  2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Uninstall String.jpg

Type This command in Psexec command promot

MsiExec.exe /x {C2103AF2-E66C-446B-9791-9207840EC821} /qn

{C2103AF2-E66C-446B-9791-9207840EC821} -> Product Code different for Every version of Sep client

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

DarrenChar's picture

I tried those steps but I wasn't able to get it to work. I'd get a error code 1603 error. Which could be related to a lot of issues.

I didn't realize how easy it is to push out the client but how hard it is to remove it from a computer remotly. I was hoping I just missed an uninstall option with SEPM or something. Guess not. Thanks for the ideas/help so far.

The reason I want to set up a remote uninstall is in case I have systems with this same issue. I want to see if removing the client and cleaning the system then readding the client fixes the issue. That way if I come across it again I'll be able to fix it. I've upgraded 20 or so systems from SEP 11 to SEP 12.1 without any issues but this one is saying it's not configured right. I want to try to fix it before I push out the other 350 system upgrades.

Mithun Sanghavi's picture

Hello,

I would suggest you to try the "Security Software Removal feature in Symantec Endpoint Protection 12.1 RU1 MP1 and above"

About the Security Software Removal feature in Symantec Endpoint Protection 12.1 RU1 MP1

http://www.symantec.com/docs/TECH178757

Third-party security software removal feature in SEP 12.1 RU1 MP1- New Feature
https://www-secure.symantec.com/connect/articles/third-party-security-software-removal-feature-sep-121-ru1-mp1-new-feature

Secondly, check these Threads..which let you know the method would assist you to remotely uinstall SEP.

Take a glance at these 2 links and let me know if this answers your question.

https://www-secure.symantec.com/connect/forums/uninstall-client-remotely

http://www.symantec.com/connect/forums/uninstalling-sep-remotely

http://www.symantec.com/connect/forums/remote-uninstallation

Again, Symantec provides Competitive uninstaller utility to uninstall any antivirus including SEP.

Competitive uninstaller utility can remove SEP even though password is set.

Competitive uninstaller utility can be found in the  Symantec_Endpoint_Protection_12.1_Tools_and_Documents_EN.exe

After Unzip, it would be :

Tools\NoSupport\CompetitiveUninstall

There is a PDF file & it will explain in details how to create competitive uninstaller package.

Check this video as well :

https://www-secure.symantec.com/connect/videos/demo-how-use-symantec-endpoint-protection-prep-tool

PDF is attached for your reference

Hope that helps!!

AttachmentSize
SEPprep_1_0.pdf 467.16 KB

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.