Endpoint Protection

Our company previously used Symantec Endpoint protection.  The Symantec uninstaller left pieces of SEPP on around 50% of the workstations.  Microsoft detected the presence of some of the unsupported Symantec EP registry keys/programs/files and would not make the Meltdown/Spectre security patches visible to the affected machines, even though we have a supported AV installed and the QualityCompat registry key is present.

I've used the Symantec "CleanWipe" utility on a few workstations to clean up the items left behind from the Symantec uninstaller.  After running CleanWipe, the workstations were able to see the Microsoft patches.

The problem is I have over 200 workstations that cannot recieve the Microsoft security patches due to fragments of SEPP still being present after the uninstall.

I'm attempting to build a Solarwinds patchmanager package to perform an unattended execution of the CleanWipe utility.  What are the command line options/switches available for an unattended execution?

Dave

It doesn't have any that I'm aware of. With SEP 14 this feature was introduced:

http://www.symantec.com/docs/HOWTO124989

Can Cleanwipe be done via unattended execution?  Is there any other way to clean up SEPP failed uninstalls via unattended execution? 

What I linked in my first post states that the MSI cannot this feature with an install that uses the MSI directly. It may be best to reach out to Symantec to get their guidance.