Endpoint Protection

 View Only
  • 1.  Uninstalling SEP remotely

    Posted Jan 28, 2013 03:32 PM

    I have multiple clients that are running SEP Enterprise 12.1 (some are running 12.1.2).  I need to downgrade them all to Small Business Edition 12.1.

     

    I am trying to do this as silently as possible and without end-user assistance if possible. 

     

    Thoughts?

     

    Thanks,

    Jackie



  • 2.  RE: Uninstalling SEP remotely

    Posted Jan 28, 2013 03:38 PM

    You can't downgrade from Enterprise to SBE as it's a separate product. You would need to do an uninstall.

    You can try this:

    Methods for uninstalling Symantec Endpoint Protection

    Article:TECH184988  |  Created: 2012-03-27  |  Updated: 2012-05-30  |  Article URL http://www.symantec.com/docs/TECH184988

     

    SEPprep competitive product uninstall tool

    Article:TECH148513  |  Created: 2011-01-19  |  Updated: 2011-04-13  |  Article URL http://www.symantec.com/docs/TECH148513

     

    Third-party security software removal support in Symantec Endpoint Protection 12.1 RU2

    Article:TECH195029  |  Created: 2012-08-15  |  Updated: 2012-11-26  |  Article URL http://www.symantec.com/docs/TECH195029

     



  • 3.  RE: Uninstalling SEP remotely

    Posted Jan 28, 2013 03:50 PM

    I've seen all those options...where would I get the Competitive Uninstall Tool on CD2 if I am downloading files off of FileConnect?

     

    MSI uninstall sounds like it might work, but I am a bit clueless when it comes to scripting that to run on each computer in the company.  Any hints/tips on that?  I need to be able to do this remotely as I work with their IT Consultant and don't have the ability to touch every computer myself.

     

    the third-party removal support - can I run that on its own?  I have seen the option to run it with the install package but not where I can just put out that command to each workstation.  Would that also uninstall Symantec?

     

    Each workstation is going to have to be rebooted after the uninstall with all of these options as well, correct?  So no matter what, I'm going to have to contact the client to have them reboot once or twice.

     

    We were hoping to be able to do this behind the scenes without contacting them if possible.



  • 4.  RE: Uninstalling SEP remotely

    Posted Jan 28, 2013 04:01 PM

    It's in the \Tools\NoSupport\SEPprep directory

    There is a PDF that accompanies SEPPrep which should should you what to do.

    Yes, each workstation will need a reboot to complete removal.

    You can also d oit via GPO or PsExec, which this thread has some detail on

    https://www-secure.symantec.com/connect/forums/uninstall-client-remotely



  • 5.  RE: Uninstalling SEP remotely

    Posted Jan 29, 2013 04:46 AM

    Hi,

    Two reboots would required on client machine. One reboot after removing SEP client and other one after installing SEP.

    You are doing downgrade however you can do it silently with the help of Competitive unintaller utility

    It's not supported by Symantec however given as an additional tool & would be preswent udner \Tools\NoSupport\SEPprep directory

    Follow the PDF to create a full package.

    You can create a batch file also to remove SEP silently.



  • 6.  RE: Uninstalling SEP remotely

    Trusted Advisor
    Posted Jan 29, 2013 08:16 AM


  • 7.  RE: Uninstalling SEP remotely

    Posted Jan 29, 2013 10:05 AM

    Thanks everyone!  Looking into it now along with the help of a senior engineer that can maybe help me through some of this scripting, batch file, etc.



  • 8.  RE: Uninstalling SEP remotely

    Broadcom Employee
    Posted Jan 30, 2013 10:40 AM

    Hi,

    There is another way to remove SEP client using msiexec command. You need to create a small batch file with the help of following article.

    To uninstall the Symantec Endpoint client using comand line 12.x:

    1. Log on the system with administrator rights.
    2. Find the Symantec Endpoint Protection uninstallation product key:
    3. Click Start, then Run.
    4. Type regedit to open the Windows reistry editor.
    5. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
    6. Browse the Uninstall sub keys in the left-hand pane, check the values in the right-hand pane to find a value for DisplayName that is Symantec Endpoint Protection.
    7. Copy the uninstallation key.
      For example the key for Symantec Endpoint Protection 12.1.671.4971 is A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8.
    8. Click Start, then Run.
    9. Type cmd to open the Windows command prompt.
    10. At the Windows command prompt type:
      msiexec /X {product uninstall key}
      For Example: msiexec.exe /x {A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8} /passive

      To generate a detailed uninstall log type:
      msiexec /X {product uninstall key} /I*v! log file path
    • Example: msiexec /x {A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8} /lv!* c:\uninstallSEP.txt

    Note: If the MSI uninstall has stopped responding:

    1. Click Start, then Run.
    2. Type taskmgr
    3. Click the Processes tab.
    4. Click End Process for all of the running windows installer processes by: Right-clicking on msiexec.exe then clicking End Process.
    5. Repeat this task for each instance of "msiexec.exe" listed.

    Refer this article:

    How to uninstall the Symantec Endpoint Protection Client using the Microsoft Installer (MSI) command line interface.

    http://www.symantec.com/docs/TECH102470