Endpoint Protection Small Business Edition

Hi all,

I've got a bit of a strange problem on one of the servers I manage. First let me provide you with some details about the infrastructure:

1 physical HyperV server runnig Windows Server 2008 R2 Standard

2 virtual machine servers running Windows Server 2008 R2 Standard

   - Domain Controller

   - Application Server

Previously SEPM and local SEP was installed on the servers and clients. Since about a year ago we switched to SEP.Cloud. The administrator back then didn't bother to remove the installation on the servers, only the clients. At one point, all the clients had SEP.Cloud and the servers were still running Local SEP and SEPM for management purposes (if any) on the DC. Also, BackupExec 2012 is installed to manage the back-ups. 

When we finally addressed this issue I tried to uninstall SEPM and the local SEP client on both servers. On the App Server I was successfull. After a reboot (or 2) I was also able to successfully install SEP.Cloud.

However, on the DC I was not able to successfully remove the installation of SEP. I was able to delete SEPM however. What remained was a corrupt/defect installation of SEP. I was familiar with the removal tools, but called SEP support anyway. They made a few good suggestions, namely to completely uninstall BackupExec 2012 before running the removal tools (but saving the config and settings for easy reinstallation), which I did. So the only "installed" application is local SEP. I ran multiple removal tools, all saying removal was successfull. However, I now have the following problem:

When I reboot after running the removal tools the computer seems clean. No more entries in Installed Programs, I followed the technote for manual removal where I have to delete multiple folders/files and registry entries. Also, no entry for the DC in the SEP.Cloud portal (just saying). But still, when I install SEP.Cloud via the portal successfully, upon rebooting and logging in with my admin account, the software triggers the uninstall somehow and the SEP.Cloud software gets deleted. Also, upon logging in I receive the notifcation you will find in the attachements (some sort of background uninstall request, but haven't got the feintest idea where this comes from). I can only make these notifications go away with running the removal tools. Then, when I try to install SEP.Cloud again, the cycle starts over when I reboot.

Is there somebody who can help me with this frustating issue?

Kind regards,

Martijn

Request the cleanwipe tool for SEP from Support, Run it first.

This would remove all the enteries, the next part would be cloud install.

I have seen simillar issues with SEP like installer running all the time

http://www.symantec.com/business/support/index?page=content&id=TECH95762

Have you tried cleanwipe?

Methods for uninstalling Symantec Endpoint Protection

Hi Brian and Rafeeq,

I tried running CleanWipe (which is what I meant with removal tools, sorry for the confusion) and performed a reboot afterwards. CleanWipe says it finds something, and it appears as if it deletes something. After rebooting I ran CleanWipe again, just to be sure, and it tells me there is nothing to delete. Again, just to be safe, I rebooted but the same issue (auto uninstall) is triggered.

Is there anything else you can think of?

My suggestion:
 

First use "Folder Options" and show the hidden folders

Look in Program Files and Program Files (x86) for any Norton / Symantec folders

If present delete them

Look in your logon account (Administrator's) Appdata/local folder for any Symantec folders

If present delete them.

Download and run ccleaner from Piriform

Scan the registry only and if there are any Norton / Symantec entries, delete them

Reboot the server if you delete anything

Download the full SEP.cloud file (redistributable version) and install from that.

Hope this helps!