Video Screencast Help
Symantec Secure Login will be live on Connect starting February 25. Get the details here.

Uninstall SEP client Through GPO

Created: 01 Apr 2013 • Updated: 18 Apr 2013 | 2 comments
Language Translations
W007's picture
+5 5 Votes
Login to vote


I have found one of the Best way to uninstall SEP clients in a large numbers with the help of GPO.I have tested this in my test environment. By the help of this Article you will be able to uninstall the SEP client through Group Policy Object.

What you have to do is create a startup or shut down script.

Note:-In SEPM side you need to remove uninstall password.

  1. To Remove Uninstall Password settings in SEPM go to

SEPM console->Clients tab ->Policies ->General Settings-> Security Settings.

To Get Uninstall String in SEP client

Uninstall String is different for Every version of Sep client

SEP Client  12.1.671.4971.105

MsiExec.exe /I{A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8}

SEP 12.1.2

MsiExec.exe /I {C2103AF2-E66C-446B-9791-9207840EC821}

Follow these steps to get Uninstall Strings.

  1. Start->RUN->Regedit
  2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8}.


Create Batch File

@Echo off

MsiExec.exe /x {C2103AF2-E66C-446B-9791-9207840EC821}  /qn


Create Batch file as uninstall.bat and save it into AD net logon folder (Shared Location).

How to run Batch file Through Group Policy

1. Start Run ->GPMC.MSC. 

2. Right click on Domain name and select create a GPO in the domain


3. Give the GPO name (SEP uninstall)


4. Edit Newly Created GPO SEP uninstall.


5. Go to Computer Configuration ->Policies ->Windows Settings ->Select Script (Startup/Shutdown).


6. Select Startup Script ->Add.


7. Browse Batch file ( Shared Location) -> Ok.



8. Apply Ok.


9. Select AD OU where you want to apply and  select Link an Existing GPO.


10. Select GPO and OK.


10 Restart Computer.

11.This process will take 5 to 10 min. for removing Sep client.


  • In SEPM side you need to remove uninstall password.
  • I have tested this process in my testing environment successfully
  • Please use this article First in your test environment then apply to your production environment.

I hope this Article will helpfull to you all……

Comments 2 CommentsJump to latest comment

TORB's picture

I'm guessing that your planning to migrate to another Antivirus vendor or upgrade to another version of SEP. (SEP can upgrade over older versions btw).  When you follow your appouch you leave the computers unprotected. A big security risk

I would recommendt to combine the uninstallation of the old antivirus software with installation of the new one to minimize the time your computers are left without protection. The same script to uninstall old AV and install new.

Also: if you wish to uninstall through CMD  its easier to use the command below. That way you don't need to update with new MSI string everytime SEP comes out in a new version.

wmic product where "name like 'Symantec Endpoint Protection%'" call uninstall /nointeractive


Login to vote
nwranich's picture

Interesting article.

Login to vote