Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

remotely uninstall symantec endpoint protection 11.0 MR2 using msiexec

Updated: 21 May 2010 | 17 comments
binayak's picture
0 0 Votes
Login to vote

I need to remotely uninstall symantec endpoint protection 11.0 MR2 from roughly 100 client (XP) machines. The symantec cleanwipe tool doesnt seem to work for me at all, and also doesnt run silently.

I want to use the following msiexec command:
msiexec /x /norestart {76B2BC31-2D96-4170-9C44-09E13B5555F3} /qn REMOVE=ALL /l*v C:\SEPuninstall.log

The problem is, the clients have an uninstall password set. I know the password. I dont know how to pass that to msiexec, if at all possible.

In previous Symantec products there was a reg key you could edit to disable the uninstall password. I cannot find that key or a related key in SEP that I can edit to remove the password requirement.

Any idea if I can remove the password requirement via reg hack? Ive poured through the cleanwipe utility scripts and dont see anything to point me in the right directoin.

Comments

binayak's picture
22
Apr
2009
0 Votes 0
Login to vote

msiexec

msiexec

SAM_SHAIKH's picture
22
Apr
2009
0 Votes 0
Login to vote

Can you pls disable the

Can you pls disable the uninstalltion password from SEPM>Clients>Policies> General Settings tab.

Right click the client group>Run command on a group>Update content>On

Then try to run the script and check.

Check for the belwo URL..

 http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2008090908381148?Open&seg=ent

Rgrds,
SAM

Sandeep Cheema's picture
22
Apr
2009
0 Votes 0
Login to vote

Registry

You can do that or as you had the original idea of changing the registry to 0 via a script

The key to take out the password is:

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\smc_exit_test

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

Shinobi's picture
09
Jun
2009
0 Votes 0
Login to vote

The key resets

HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\smc_exit_test

The key resets itself on reboot, and the uninstall still requests a password if run without reboot after changing the key...
Is there anything else I am missing?

chinthub@gmail.com's picture
22
Apr
2009
0 Votes 0
Login to vote

Facing the same problem!

I am not much familiar with sripting. I have installed SEP in my company. We have approximately 120 pc.

Can anyone provide me instructions and necessary scripts to uninstall the clients from all the pcs?  I'm very much new to the field. Please help.

Thanks!

binayak's picture
22
Apr
2009
0 Votes 0
Login to vote

I am trying to disable the

I am trying to disable the uninstalltion password from SEPM>Clients>Policies> General Settings ta, but once I close the SEP Management Console and reopen, it is showing the old configuration.

Jukka Ruotsila's picture
22
Apr
2009
0 Votes 0
Login to vote

Hi, I cannot find that key

Hi,

I cannot find that key from my SEP MR4 install. If I add that, what should the type and value be?

- Jukka

Ajit Jha's picture
22
Apr
2009
0 Votes 0
Login to vote

I think Binayak will help u

I think Binayak will help u on this matter cuz he is Microsoft Expertise.

Regards'

Ajit Jha

Technical Consultant

STS

Sandeep Cheema's picture
22
Apr
2009
0 Votes 0
Login to vote

It has to be there

Ideally it should be there irrespective of the password set or not.

Are you sure this is not a self managed client?

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

binayak's picture
22
Apr
2009
0 Votes 0
Login to vote

Hi Sandeep, the same thing is

Hi Sandeep, the same thing is happening with me. I am not getting the key and the client is a managed client.

M Samir0n's picture
22
Apr
2009
0 Votes 0
Login to vote

i am having doubt on it

i am having doubt on it

Sandeep Cheema's picture
22
Apr
2009
0 Votes 0
Login to vote

?

Doubt on what?

SymInstData is another key that has to be taken out for the uninstall routine to begin but the key has to be there.

De facto when AV does something, it starts jumping up and down, waving its arms, and shouting "Hey!  I found a virus!  Look at me!  I'm soooo goooood!"

chinthub@gmail.com's picture
23
Apr
2009
0 Votes 0
Login to vote

Any help please..??

 Any help please..?? 

"I am not much familiar with sripting. I have installed SEP in my company. We have approximately 120 pc.

Can anyone provide me instructions and necessary scripts to uninstall the clients from all the pcs? I'm very much new to the field. Please help.

Thanks!"


Jukka Ruotsila's picture
23
Apr
2009
0 Votes 0
Login to vote

Sandeep, I'm 110% sure :)

Sandeep,

I'm 110% sure :) Troubleshooting data in client shows that it's connected and everything is working correctly.

- Jukka

Symantec World's picture
23
Apr
2009
0 Votes 0
Login to vote

Re

Hi,

Can anyone provide me Script to uninstall Trend Micro 8.0.

Because we have to deploy SEP.

Regards, M.R

kajal's picture
09
Jun
2009
0 Votes 0
Login to vote

First u disable the

First u disable the uninstalled password from administrative login in the console manager, there after u use the tools.

Ajit Jha's picture
09
Jun
2009
0 Votes 0
Login to vote

Dear kajal We will be very

Dear kajal

We will be very happy if you could mention the steps to disable the uninstalled password from administrative login in the console manager, there after u use the tools and how it works.

Regards'

Ajit Jha

Technical Consultant

STS