Endpoint Protection

 View Only
  • 1.  SepPrep cannot remove Password protected SEP Agent

    Posted Dec 13, 2015 12:52 AM

    Hello everyone , this is my SepPrep file which I am using to uninstall and reinstall SEP Agent. The problem is I cannot remove it when agent is password protected for uninstall . I have tried supplying password with double quotes and without it but for some reasons SepPrep doesn't take it and remove and agent. When I remove the password I can remove the agent just fine.  Please tell me what i am missing here ?

     

    [Settings]
    ShowGUI=Y
    ShowMessageBox=Y
    MessageBoxText=Prepairing your system for Symantec Endpoint Protection 12.1.x  During this process other antivirus products will be removed.\n\nIf you are prompted please fully remove these products.
    AutoRunAfterUILoads=N
    AskBeforeRemoval=N
    SilentMSIInstaller=Y
    RemoveSymantec=Y
    CheckDiskSpace=Y
    ResumeAfterReboot=Y
    EnableLogging=Y
    LogPath=C:\Users\user4\Desktop\SEPprep
    MSIExtraParameters=PASSWORD="symantec"
    RunBeforeRemoval=
    RunAfterRemoval=reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce /v "Install SEP 12" /t REG_SZ /d "C:\Users\user4\Desktop\SEPprep\setup.exe" /f
    RunAfterRemoval=shutdown -r -t 30 -f
    [ProductNames]
    Symantec Endpoint Protection
     

    Your replies and suggestions would be appreciated in this regard.  Thanks in advance

     



  • 2.  RE: SepPrep cannot remove Password protected SEP Agent
    Best Answer

    Posted Dec 13, 2015 01:44 AM

    Best option is to move the clients to a group where there is no password protection. Then run your SEPPrep process. SEPPrep doesn't have an option to supply the uninstall password. And adding it in the msi parameter is not going to work as it doesn't function like that.



  • 3.  RE: SepPrep cannot remove Password protected SEP Agent

    Posted Dec 13, 2015 02:09 AM

    Thanks for your reply Brian but the thing is endpoints on which the SepPrep needs to be applied are distributed within diffrent groups so moving each and every agent to a separate group where no password is applied is a bit tedious job to do . However there is no way that we can supply the password in the SepPrep.ini file or any other way we can supply it in the SepPrep.ini file ?  It wont work even if I dont supply it as an MSI paramaeter and the only option is to remove the password from the client ?

    Regards



  • 4.  RE: SepPrep cannot remove Password protected SEP Agent

    Posted Dec 13, 2015 08:27 AM

    There is no option to supply an uninstall password unfortunately. The MSI parameter is not applicable in this case. Nor is there any ini file that can be supplied.



  • 5.  RE: SepPrep cannot remove Password protected SEP Agent

    Posted Dec 13, 2015 01:41 PM

    If you have Tamper Protection disabled you can add in a parameter in SEPprep to delete the uninstall password registry key first.  Then it will complete the uninstall of the SEP client.



  • 6.  RE: SepPrep cannot remove Password protected SEP Agent

    Posted Dec 13, 2015 02:30 PM

    Well I tried to look for the registery entry but couldn't find one for Uninstall password , I believed there existed one for the older ones but not the newer version i.e 12.x.x 



  • 7.  RE: SepPrep cannot remove Password protected SEP Agent

    Posted Dec 13, 2015 02:37 PM

    I've not seen a registry key containing the uninstall password since SAV 10.x and early SEP 11.x versions. AFAIK this all changed with 12.1.



  • 8.  RE: SepPrep cannot remove Password protected SEP Agent

    Posted Dec 13, 2015 04:35 PM

    The registry location is as follows:

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC

    then delete the "smcinstdata" key. 



  • 9.  RE: SepPrep cannot remove Password protected SEP Agent

    Posted Dec 13, 2015 04:57 PM

    I deleted the key and was still prompted for uninstall password. What am I missing?