Hi,

we are currently in the process of upgrading our company SEP 11 to SEP12, this is a major project involving almost 5000 clients, currently we are working on deploying the SEP 12 clients to users in our company. I need to create a script to remove/uninstall the old SEP 11 and install SEP 12 remotely, all is well during the testing period, but now i have stumbled across a problem. we need to use the GUID to remove the old SEP11 -- below is how my script looks now:

"C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe" -stop -p pass

REG DELETE "HKLM\Software\Symantec\Symantec Endpoint Protection\SMC" /v smc_exit_test /f

REG DELETE "HKLM\Software\Symantec\Symantec Endpoint Protection\SMC" /v smcinstdata /f

MsiExec.exe /x {F744D87D-02A9-48E0-98C0-07E160C22F57} /qb- /promptrestart

we are planning to use psexec@pclist.txt to remotely push the script to multiple machines, the problem is how ever, because we have multiple clients with their own "GUID" we have to manually change the string everytime we want to use the script on different machines. My question is, is there a way for us to create a script that can proceed to uninstall with out the GUID? or any other solution to our problem?

 

 

have you tried this?

You are right, the GUID changes with different version. you need to check all the version in your network and append those to your script, if it finds it will uninstall or else it would skip that.

why dont you try SEP Prep tool. and make Remove symantec to Yes

SEPprep competitive product uninstall tool

http://www.symantec.com/business/support/index?page=content&id=TECH148513

 

• RemoveSymantec: The RemoveSymantec option controls whether SEPprep should remove any Symantec product it finds. This option will not remove all Symantec products, instead it will only remove the Symantec products listed in the [ProductNames] section of the SEPprep.ini file. If this option is disabled it will skip any product it finds that has the word “Symantec” in it. Enabling this can be useful if you want to remove products such as older versions of SAV or SCS. However, be careful, as this will remove the SEP client also. This option can be set to Y or N. This is disabled by default.

Their is no requirement to uninstall the client package of olde version. You can use the push deployment wizard or Autoupgrade to upgrade the current version client in to 12.1.

Their is no requirement to uninstall the client package of olde version.

You can use the push deployment wizard or Autoupgrade to upgrade the current version client in to 12.1.

edit

http://www.symantec.com/connect/articles/overview-push-deployment-wizard-symantec-endpoint-protection-121

AutoUpgrade

http://www.symantec.com/business/support/index?page=content&id=HOWTO80780

in our enviroment currently, we were told to remove the old client and install the new SEP12 clients.

We will try to test the SEPPrep and see if it works.

Hello,

Why not just upgrade the SEPM and then use the Autoupgrade Feature??

http://www.symantec.com/business/support/index?page=content&id=TECH96789

In case you want to use the script, for removing previous version of Symantec products you can use the SEPprep tool:

http://www.symantec.com/business/support/index?pag...

...otherwise please note if you are upgrading to newer SEP version - uninstalling of previous 11.x client is not necessary. Installer can without issue migrate from previous versions.

AFAIK, if the uninstall password is configured, there is no way to uninstall SEP silently.  Therefore, if you ever need to perform a mass uninstall by script/GPO, you will first have to remove the password protection.  If you're looking to do a uninstall on a specific client remotely then you'll need to move that client to a specialised group where the password protection is disabled.

The closest thing I can find as a reference is the article below (This is for v11):\

http://www.symantec.com/docs/TECH105827

More general MSI uninstall information can be fond here:

http://www.symantec.com/docs/TECH102470

 

Secondly, check these Articles below:

Methods for uninstalling Symantec Endpoint Protection

http://www.symantec.com/docs/TECH184988

To Uninstalling client software with Active Directory Group Policy Object:

http://www.symantec.com/docs/HOWTO55432

Take a glance at these 3 links and let me know if this answers your question.

http://www.symantec.com/connect/forums/uninstalling-sep-remotely

http://www.symantec.com/connect/forums/remote-uninstallation

https://www-secure.symantec.com/connect/forums/uninstall-client-remotely

Hope that helps!!

i run these script to disable the password and able to run the uninstallation silently:

REG DELETE "HKLM\Software\Symantec\Symantec Endpoint Protection\SMC" /v smc_exit_test /f

REG DELETE "HKLM\Software\Symantec\Symantec Endpoint Protection\SMC" /v smcinstdata /f

was Sepprep helpful?

i have decided to use this tool, i have been given the go for upgrade to sep 12 rather than un-installing it, so this tool is much easier to use and can be installed silently as well.

 

https://www-secure.symantec.com/connect/articles/overview-push-deployment-wizard-symantec-endpoint-protection-121

It will show the message coz the client will have to talk to sepm to get the updates. it will take some time. Best method would be to install SEP package with latest defs, check this document

How to add new Virus definitions from SEPM 12.1 to existing SEP 12.1 client install package