SEP 11 Silent uninstall not working via SCCM
I have created uninstall package for SEP 11. Its working fine when run manually or via Schedule task. But when push via SCCM it prompting for uninstall password. Please help.
Using below command in a batch file.
reg DELETE "HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC" /v smc_exit_test /f
"C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\smc" -stop
reg DELETE "HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC" /v SmcInstData /f
reg DELETE "HKLM\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC" /v SmcInstData /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\AdministratorOnly\Security" /v LockUnloadServices /d 0 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\AdministratorOnly\Security" /v UseVPUninstallPassword /d 0 /t REG_DWORD /f
MSIEXEC /X {4117BB0F-FF94-4373-B5A1-D9799EA9DBEA} REMOVE=ALL REMOVE=ALL /qb! REBOOT=ReallySuppress
RD /S /Q "%ProgramFiles(x86)%\Symantec"
REG Delete "HKEY_LOCAL_MACHINE\SOFTWARE\Symantec" /f
Answers (3)
As far as I remember there is a proper procedure given on symantec site to uninstall SEP. I am not sure where, it has been quite some time when I saw it.. a few years. But you can script those steps.
REMOVE=ALL is repeating, so you may remove one.
"prompting for uninstall password" - do you mean administrator password?
When uninstalling via sccm, do you configure it to run under system account?
Comments:
-
prompting for password means, when trying to uninstall it requires password to uninstall SEP. I am running it under System account. With SCCM push it not able to delete "HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC" registry key. - bini2082 10 years ago
-
In first place, how do you know it's prompting for password if it's running under sccm account? - SnowLyric 10 years ago
-
I have made the SCCM program to run in Normal mode. thats the way i am able to get the popup. - bini2082 10 years ago
-
what do you mean by normal mode? I couldn't find any such in sccm - SnowLyric 10 years ago
I am strongly against to the following lines
RD /S /Q "%ProgramFiles(x86)%\Symantec"
REG Delete "HKEY_LOCAL_MACHINE\SOFTWARE\Symantec" /f
