Scripting Question

Removing Previous versions of SEP with K1000

11/07/2017 1290 views
Hi Folks,

We are currently starting the process of switching antivirus software from Symantec to McAfee. I have been running into walls trying to find an easy way of removing SEP without hands at the keyboard. We have 2000 endpoints and multiple versions of SEP installed on these machines. Has anyone out there been able to remove SEP using the K1000? Thanks.
0 Comments   [ + ] Show comments


All Answers


I found that the first step in the process is to remove the need for an Administrative password. This can be done from the SEP management console. Then confirm that you have the correct registry key for the version that you are looking to remove. Windows 7 x64 and XP x32 will show as the same reg key in the KBOX1100. The correct reg key can be found in the c:\ProgramData\Symantec\Symantec Endpoint Protection\Your Version Number

Here is the string that we are using to remove version 12.x.xxxx.xxx.xxx

msiexec.exe /X{4ADBF5BE-7CAF-4193-A1F9-DE6820E68569} /qn

Answered 11/07/2017 by: SpiderHex
White Belt

  • I've run this, but often k1000 wills how that the software is still installed, even if the machines shows it as uninstalled. Running Symantec CleanWipe resolves this issue, but I haven't found a succesful way to push that out via k1000. If anyone else has, i'd love to hear it.
This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ