Endpoint Protection

 View Only
  • 1.  Remove client from SEP Manager remotely.

    Posted Mar 18, 2015 08:37 AM

    Hello,

    I am looking to for way to remove the client from SEP Manager console  remotely. I looked over the SDK classes and none seems to offer any method to delete clients remotely.

    I am thinking about removing directly from database. Unfortunely I do not know that good the SEPM database schema to safely remove the clients.

    Can you advise how can I remove the clients remotely from SEP Manager console ?

    Thanks,

    Tomasz



  • 2.  RE: Remove client from SEP Manager remotely.

    Posted Mar 18, 2015 08:39 AM

    Do you want to uninstall the client remotely or just delete from SEPM?

    You could try the steps mentioned here:

    Uninstall Symantec Endpoint Protection



  • 3.  RE: Remove client from SEP Manager remotely.

    Broadcom Employee
    Posted Mar 18, 2015 09:20 AM

    Hi,

    Thank you for posting in Symantec community.

    You can not remove only SEP clients remotely with the help of Symantec Endpoint Protection Manager.

    If you removed/deleted clients from the database, it won't affect database schema however on the next hearbeat interval clients will be connected to the SEPM.

    To uninstall SEP clients remotely use GPO or MSI command line etc.

    Uninstall Endpoint Protection clients using Microsoft Installer (MSI) commands

    http://www.symantec.com/docs/TECH102470

    Uninstalling client software with an Active Directory Group Policy Object

    http://www.symantec.com/docs/HOWTO55432



  • 4.  RE: Remove client from SEP Manager remotely.

    Posted Mar 18, 2015 10:31 AM

    Thank Brian and Chetan for your replies and suggestions how to uninstall the SEP.
    Unfortunetly it is not what I am looking for. In fact I want to remove the client from SEPM console remotely.

    We have internal process, that removes clients from systems such as Active Directory, Altiris, SAP, SEP console etc, ones the pc has got replaced or an employee leaves company.

    At the moment analyst needs to visit each system individually and remove the client from given system. The idea is to do is centrally in corresponding systems. I succeeded in deleting clients from AD with powershell, from Altiris with ASDK.

    Now I am looking for options for SEP. SDK for SEP seems to be pretty limited in terms of client management.

    So what are the options are on the table ? In regards to SQL what records and entries needs deleteting to be sure the client has gone for good from console without any side effects ? Or where can I find DB schema ?

    Potentially I could use SQL connector in Workflow solution to delete recor

    Thanks for further suggestions.

    Tomasz



  • 5.  RE: Remove client from SEP Manager remotely.

    Posted Mar 18, 2015 10:38 AM

    You can set the option to delete clients not connected for XX days

    How to delete clients that have not connected to the Symantec Endpoint Protection Manager for a specified time

    http://www.symantec.com/business/support/index?page=content&id=TECH178865



  • 6.  RE: Remove client from SEP Manager remotely.

    Posted Mar 18, 2015 03:01 PM

    Rafeeq,

    Thank you for the link to the article. . In Altiris you also have option to delete the client after X days if the client has not connected. It is not what I am after I am afraid.

    What I am after is how to delete client remotely from SEP manager on demand ?

    For example I have 100's of clients in text file and then with script, API, SQL code whatever, the tool does not matter now, and then I will remove them in one go ?

    Or what tables store information related to the client and only client. The rest of code I could figure out on my own. The SDK provided out of box seems to be close end.

    Any ideas ?

    Thanks



  • 7.  RE: Remove client from SEP Manager remotely.

    Posted Mar 24, 2015 07:55 AM

    I my understanding is that there is no way to manage clients on SEP Manager console with the current API or other means.

    If so, I am willing to close the discussion.



  • 8.  RE: Remove client from SEP Manager remotely.

    Broadcom Employee
    Posted Mar 24, 2015 09:12 AM

    If SEP client is installed on the machine then it can not be removed from the SEPM console.