Endpoint Protection

Hi all , I need some help with SepPrep.ini file. Basically what I want to do is I want to uninstall SEP 12.1.3 and then install SEP 12.1.6.  The issue is I can uninstall via SepPrep fine but when it tries to install the newer vesion the tool asks for a reboot to complete the uninstallation however when the machine is rebooted the process of installing the newer version never starts.

I am looking for an arguement in the SepPrep.ini file that will either remove the pending rename operation entry in the regedit or it will reboot the machine and once it is back it will automatically and silently start the installation process. Any help in this regard would be highly appreciated. I am attaching the ini file for your reference.

 

Thanks and Regards

 

 

Why are you not just upgrading right over the old SEP version?

Brian actually the version is same so it won't over install

Yea I don't think SEPprep is going to do that. I don't know of a way to start the install after reboot with it since it has no switch for it, other than resume after reboot but you already have that set to Y. Probably going to need something like SCCM, Altiris, etc.

Actually I can force it to reboot the machine when it succuesfully uninstalls SEP agent , but when the machine comes back after the reboot the installation process never starts.

What you mean by doing it via SCCM means that I uninstall via SEPM and then push the new package via SCCM ?

Thanks 

What you mean by doing it via SCCM means that I uninstall via SEPM and then push the new package via SCCM ?

Yes.

Also, why are you essentially re-installing SEP? Is there a problem with the client?

Do it via sccm task sequence Uninstall sep Reboot Install sep

Yes there are problems with agents for example on the SEPM dashboard they are appearing as disabled. When I click on the list mostly it shows that auto protect , sonar and download insight is malfunctioning furthermore for antivirus download it is showing as not available on SEPM. When I tried to open Agent UI it was showing that installation might be corrupted and sonar defs are corrupted but at the same time when SymHelp ran on same machine it didn't return any error. So I am suspecting that either the defs are corrupted on the agent or there is some corrupted installation as a result agents are disabled and components are malfunctioning .

Brian even the last time status changed / last connection time is latest.

Did you watch this video about Sepprep ? and did you provide the Sep stuep files name in the afterreboot field  and set the remove symantec field to yes ? 

 

[Settings]
ShowGUI=N
ShowMessageBox=N
MessageBoxText=Prepairing your system for Symantec Endpoint Protection 11.0.  During this process other antivirus products will be removed.\n\nIf you are prompted please fully remove these products.
AutoRunAfterUILoads=N
AskBeforeRemoval=Y
SilentMSIInstaller=Y
RemoveSymantec=N
CheckDiskSpace=Y
ResumeAfterReboot=Y
EnableLogging=Y
LogPath=
RunBeforeRemoval=
RunAfterRemoval=

[UninstallPaths]
SOFTWARE\McAfee\ePolicy Orchestrator\Application Plugins

 

Demo: How to use the SEP Prep tool

Ideally SEPprep tool should work however happy to see issue got resolved by SCCM.

 

Hi Praveen , These were the options which I had

[Settings]
ShowGUI=N
ShowMessageBox=N
MessageBoxText=Prepairing your system for Symantec Endpoint Protection 11.0.  During this process other antivirus products will be removed.\n\nIf you are prompted please fully remove these products.
AutoRunAfterUILoads=N
AskBeforeRemoval=N
SilentMSIInstaller=Y
RemoveSymantec=Y
CheckDiskSpace=Y
ResumeAfterReboot=Y
EnableLogging=Y
LogPath=C:\abc
RunBeforeRemoval=
RunAfterRemoval=C:\abc\setup.exe

I wanted to do this via SepPrep . Actually what happens is when existing version is removed and it tries to execute RunAfterRemoval arguent it couldn't install SEP becuase prior to install the agent it need to reboot machine once , so this is where it is not happening and automatically starting machine after the reboot doesnt trigger the installation of SEP.

Is there anything I am missing here. Regards