Endpoint Protection

  • 1.  Uninstall password for SEP setting location

    Posted Mar 12, 2020 10:12 AM

    Hi All.

    I'd like to know, where can I find setting location for uninstall password in SEP new versions (12+). 
    I do not need to disable it or remove. I just wanna know if it is enabled or not. 

    I tried to find HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\AV\AdministratorOnly\Security\UseVPUninstallPassword but there only 2 entries inside Security: LockUnloadServices and  UseScanNetDrivePassword.

    As I understand this related to old SEP products ( < 11) and does not work for new version (14 for example). 

    Any help? I just want to know if password protection for uninstall is enabled or now. 



  • 2.  RE: Uninstall password for SEP setting location

    Posted Mar 12, 2020 10:44 AM
    Hello,

    I'm not sure if this is the case for older clients (11 and older) but you can see if there is a password enforced in the SEPM Console under Policies.


  • 3.  RE: Uninstall password for SEP setting location

    Posted Mar 12, 2020 10:49 AM
    I cannot connect to a console. SEP installed on clients machines, I can only remotely connect and look files, registries, etc


  • 4.  RE: Uninstall password for SEP setting location

    Broadcom Employee
    Posted Mar 12, 2020 11:40 AM
    Open the SEP Client and export the policy.  Review the exported xml file for password.

    ------------------------------
    John Owens
    Principal Product Support
    Symantec
    United States
    ------------------------------



  • 5.  RE: Uninstall password for SEP setting location

    Posted Mar 12, 2020 11:48 AM

    Did you read my post, man?  I do no need password. I can not open SEP CLIENT. 

    I need to write a script which will check IS PASSWORD PROTECTION ENABLED. 




  • 6.  RE: Uninstall password for SEP setting location

    Broadcom Employee
    Posted Mar 12, 2020 12:25 PM
    The password options are not in the registry or on disk. So a script is not likely.

    ------------------------------
    John Owens
    Principal Product Support
    Symantec
    United States
    ------------------------------



  • 7.  RE: Uninstall password for SEP setting location

    Broadcom Employee
    Posted Mar 12, 2020 12:28 PM
    You could run a smc command pull the policy xml then parse it.  That is it if I am not mistaken.

    ------------------------------
    John Owens
    Principal Product Support
    Symantec
    United States
    ------------------------------



  • 8.  RE: Uninstall password for SEP setting location

    Posted Mar 13, 2020 03:53 AM

    Hm. sounds interesting. Thanx. I'll take a look

    >The password options are not in the registry or on disk. So a script is not likely.

    In older version of Symantec there was a registry key "UseVPUninstallPassword". There is no analog now for new versions?




  • 9.  RE: Uninstall password for SEP setting location

    Broadcom Employee
    Posted Mar 13, 2020 01:44 PM
    Correct. That was removed and placed in a unreadable dat file I believe.

    ------------------------------
    John Owens
    Principal Product Support
    Symantec
    United States
    ------------------------------



  • 10.  RE: Uninstall password for SEP setting location

    Posted Mar 16, 2020 07:47 AM
    Thanx, pal. Could you please advice me which command should I use to parse xml file and which property should I check there? Or maybe a link where I can read this information