Uninstalling SEP 14 client remotly from SEPM server?

[Almir Karastanovic]

Is there a way to uninstall SEP 14 client remotly from SEPM console ? We have 14 MP2 on SEPM and 14 MP2 on all SEP clients

 

[ℬrίαη]

There isn't a simple point and click option, no. You may be able to use the SEPPrep tool to do it but it's not straightforward.

[Almir Karastanovic]

Does SEPPrep tool exist in version 14 MP2 ? 

I can't find that in the installation folder \tools.

[jondkauf]

Hello Karinjo,

You can accomplish this by using a Host integrity polliy that runs the MSI command to uninstall SEP and then assign the Host integrity policy to that group.  Once you have finished you should withdraw the policy so that it does not run and uninstalls sep.

See the attached sample policy.

 

Thanks,

Attachment(s)

uninstall SEP client-sample.zip   1 KB 1 version

[nd loh]

hi jondkauf,

Any chance to use the host integrity policy for remote perform a repair job?

regards,

Loh

[Almir Karastanovic]

@jondkauf, thanks for your post

I tried with this method , I applied this sample Host Integrity policy to my Test group in SEPM, but  SEP hasn't been uninstalled on any computer in Test group.

Maybe, I missed something?

[Rafeeq]

this is the easiest i could find and works perfectly, 

 

wmic /node:@"c:\list.txt"  product where name="Name displayed in add/remove programs" call uninstall >c:\uinstall.txt

[Almir Karastanovic]

I get the following message: "Return Value 1602".... and SEP cannot be uninstalled.

[ℬrίαη]

Uninstall password enabled?

[jondkauf]

Hi Karinjo,

 

It looks like you have the uninstall password option enabled.  You will need to disable that option so that the client can be uninstalled.  See the following article for more information.

Password-protecting the Symantec Endpoint Protection client
HOWTO81235 June 13th, 2017 http://www.symantec.com/docs/HOWTO81235

Thanks,

[jondkauf]

@Karinjo,  Here is an updated version of the policy that includes OS checks, sep version checks so it will only work for 14 MP 2 ( 32-bit and 64-bit).

Note, that the uninstall password will need to be disabled and you will also have to reboot the machine after the uninstall completes.

 

@nd loh,  Yes you could probably do that, though i have not tested it. 

 

Thanks,

Attachment(s)

uninstall SEP client-sample version 1.5.dat_.7z   2 KB 1 version

[Calin_Olariu]

Hello Jondkauf,
Does this option via HI policy really works ?
I'm asking because i've tried it and nothing happens on the agent.
There's no uninstall process starting, nothing new is being registered in eventviewer.
Created a separate discussion, perhaps there's somebody more experienced and knows a bit more then i do.
SEP uninstall via Host Integrity policy won't execute requirement

[Almir Karastanovic]

Thanks guys, it looks like I forgot to clear uninstall password...

@jondkauf, thanks for updated policy/.

[nd loh]

Hi jondkauf,

thanks, I will try it.

 

regards,

Loh

[minli]

hi jondkauf,

where can I find the sample policy that you mentioned?

thanks