Video Screencast Help

Uninstalling SEP remotely

Created: 28 Jan 2013 • Updated: 28 Jan 2013 | 7 comments
jfriedland's picture

I have multiple clients that are running SEP Enterprise 12.1 (some are running 12.1.2).  I need to downgrade them all to Small Business Edition 12.1.

I am trying to do this as silently as possible and without end-user assistance if possible. 




Comments 7 CommentsJump to latest comment

Brɨan's picture

You can't downgrade from Enterprise to SBE as it's a separate product. You would need to do an uninstall.

You can try this:

Methods for uninstalling Symantec Endpoint Protection

Article:TECH184988  |  Created: 2012-03-27  |  Updated: 2012-05-30  |  Article URL


SEPprep competitive product uninstall tool

Article:TECH148513  |  Created: 2011-01-19  |  Updated: 2011-04-13  |  Article URL


Third-party security software removal support in Symantec Endpoint Protection 12.1 RU2

Article:TECH195029  |  Created: 2012-08-15  |  Updated: 2012-11-26  |  Article URL

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

jfriedland's picture

I've seen all those options...where would I get the Competitive Uninstall Tool on CD2 if I am downloading files off of FileConnect?

MSI uninstall sounds like it might work, but I am a bit clueless when it comes to scripting that to run on each computer in the company.  Any hints/tips on that?  I need to be able to do this remotely as I work with their IT Consultant and don't have the ability to touch every computer myself.

the third-party removal support - can I run that on its own?  I have seen the option to run it with the install package but not where I can just put out that command to each workstation.  Would that also uninstall Symantec?

Each workstation is going to have to be rebooted after the uninstall with all of these options as well, correct?  So no matter what, I'm going to have to contact the client to have them reboot once or twice.

We were hoping to be able to do this behind the scenes without contacting them if possible.

Brɨan's picture

It's in the \Tools\NoSupport\SEPprep directory

There is a PDF that accompanies SEPPrep which should should you what to do.

Yes, each workstation will need a reboot to complete removal.

You can also d oit via GPO or PsExec, which this thread has some detail on

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

JS@support's picture


Two reboots would required on client machine. One reboot after removing SEP client and other one after installing SEP.

You are doing downgrade however you can do it silently with the help of Competitive unintaller utility

It's not supported by Symantec however given as an additional tool & would be preswent udner \Tools\NoSupport\SEPprep directory

Follow the PDF to create a full package.

You can create a batch file also to remove SEP silently.

Mithun Sanghavi's picture


Take a glance at these 2 links and let me know if this answers your question.

Hope that helps!!

Mithun Sanghavi
Senior Consultant

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

jfriedland's picture

Thanks everyone!  Looking into it now along with the help of a senior engineer that can maybe help me through some of this scripting, batch file, etc.

Chetan Savade's picture


There is another way to remove SEP client using msiexec command. You need to create a small batch file with the help of following article.

To uninstall the Symantec Endpoint client using comand line 12.x:

  1. Log on the system with administrator rights.
  2. Find the Symantec Endpoint Protection uninstallation product key:
  3. Click Start, then Run.
  4. Type regedit to open the Windows reistry editor.
  5. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
  6. Browse the Uninstall sub keys in the left-hand pane, check the values in the right-hand pane to find a value for DisplayName that is Symantec Endpoint Protection.
  7. Copy the uninstallation key.
    For example the key for Symantec Endpoint Protection 12.1.671.4971 is A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8.
  8. Click Start, then Run.
  9. Type cmd to open the Windows command prompt.
  10. At the Windows command prompt type:
    msiexec /X {product uninstall key}
    For Example: msiexec.exe /x {A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8} /passive

    To generate a detailed uninstall log type:
    msiexec /X {product uninstall key} /I*v! log file path

  • Example: msiexec /x {A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8} /lv!* c:\uninstallSEP.txt

Note: If the MSI uninstall has stopped responding:

  1. Click Start, then Run.
  2. Type taskmgr
  3. Click the Processes tab.
  4. Click End Process for all of the running windows installer processes by: Right-clicking on msiexec.exe then clicking End Process.
  5. Repeat this task for each instance of "msiexec.exe" listed.

Refer this article:

How to uninstall the Symantec Endpoint Protection Client using the Microsoft Installer (MSI) command line interface.

Chetan Savade
Sr.Technical Support Engineer, Endpoint Security
Enterprise Technical Support

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<