none
FEP 2010 automatic removal of Symantec endpoint 12

    問題

  • Hi,

    We are changing our antivirus from Symantec Endpoint 12 to FEP 2010. FEP 2010 cannot remove Symantec 12 automatically. Is there any suggested or tried method i can use to remove automatically Symantec 12 from the clients when distributing FEP 2010 from SCCM. 

    Thanks & Regards

    Nahas


    Nahas

    2012年3月4日 下午 01:08

解答

  • Hi all,

    I solved the same situation several days ago on cca 500 clients.

    We have SEP from 12.0 to 12.1 RU1 on all PC and changed this to FEPP2010. I tested several methods how to do this automaticaly.

    1) Use Rollback package by SEPM Console with SEPUninstaller Tool stored on second CD(DVD) of SEP in <drive>\Tools\NoSupport\SEPUninstaller\
        Unfortunately no success by my mistake (maybe)... You must modify ALL your deployed packages!!! I have last version only in SEPM

    2) Remove this product by SCCM package with use GIUD and MsiExec... You must to check uninstall string in your registry (uninstal hive) and prepare CMD file as package to SCCM (or other way). I used this two:
    12.1
    MsiExec.exe /I{EFCC6FA1-8F3F-46E6-B7BF-8336CCD3DA67} /qn REMOVE=ALL
    MsiExec.exe /I{BCE5F3B0-8407-42DB-8073-1812F7D2D1E6} /qn REMOVE=ALL
    12.0
    MsiExec.exe /I{895665D9-6614-4930-9D39-3567283DD424} /qn REMOVE=ALL
    MsiExec.exe /I{D350A6A1-044F-4E19-8267-F1C44775CFC2} /qn REMOVE=ALL
    MsiExec.exe /I{A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8} /qn REMOVE=ALL
    MsiExec.exe /I{84B70C16-7032-41EE-965C-3C8D9D566CBB} /qn REMOVE=ALL

    3) Use this command through PS-Tools... Problem on W7 security and problem on "dirty" PC. Dirty mean that process asked some file - you must click Cancel but You not see this by /qn options

    4) Manualy - all dirty PC you must solve by this way. I must remove cca 40PC by this way and now I am lucky ;)

    Regards Jerry

    2012年3月9日 下午 01:18

所有回覆

  • Look into execmgr.log to get more info on the cause. In plus, make sure that the symantec client is not protected by a password.

    Bechir Gharbi | http://myitforum.com/myitforumwp/community/members/bgharbi/ | Time zone : GMT+1

    2012年3月5日 上午 08:06
  • Hi Nahas,

    Thank you for the post.

    FEP could uninstall SEP with version listed below:
    •Symantec Endpoint Protection version 11
    •Symantec Endpoint Protection Small Business Edition version 12

    You could change the registry key to reset SEP password.
    http://blog.colemberg.ch/2011/06/install-fep-2010-fails-with-windows-firewall-configuration-provider-error/

    Another article related uninstall antivirus tool may helpful to you.
    http://blog.concurrency.com/infrastructure/system-center-infrastructure/fep-2010-uninstalling-competitive-antivirus-solutions/


    If there are more inquiries on this issue, please feel free to let us know.

    Regards


    Rick Tan

    TechNet Community Support


    Important Note: This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. There are inherent dangers in the use of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet.
    • 已編輯 Rick TanModerator 2012年3月6日 上午 06:45
    • 已提議為解答 Jerry_CZK 2012年3月9日 下午 12:59
    • 已取消提議為解答 Jerry_CZK 2012年3月9日 下午 01:00
    2012年3月6日 上午 06:44
    版主
  • Hi all,

    I solved the same situation several days ago on cca 500 clients.

    We have SEP from 12.0 to 12.1 RU1 on all PC and changed this to FEPP2010. I tested several methods how to do this automaticaly.

    1) Use Rollback package by SEPM Console with SEPUninstaller Tool stored on second CD(DVD) of SEP in <drive>\Tools\NoSupport\SEPUninstaller\
        Unfortunately no success by my mistake (maybe)... You must modify ALL your deployed packages!!! I have last version only in SEPM

    2) Remove this product by SCCM package with use GIUD and MsiExec... You must to check uninstall string in your registry (uninstal hive) and prepare CMD file as package to SCCM (or other way). I used this two:
    12.1
    MsiExec.exe /I{EFCC6FA1-8F3F-46E6-B7BF-8336CCD3DA67} /qn REMOVE=ALL
    MsiExec.exe /I{BCE5F3B0-8407-42DB-8073-1812F7D2D1E6} /qn REMOVE=ALL
    12.0
    MsiExec.exe /I{895665D9-6614-4930-9D39-3567283DD424} /qn REMOVE=ALL
    MsiExec.exe /I{D350A6A1-044F-4E19-8267-F1C44775CFC2} /qn REMOVE=ALL
    MsiExec.exe /I{A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8} /qn REMOVE=ALL
    MsiExec.exe /I{84B70C16-7032-41EE-965C-3C8D9D566CBB} /qn REMOVE=ALL

    3) Use this command through PS-Tools... Problem on W7 security and problem on "dirty" PC. Dirty mean that process asked some file - you must click Cancel but You not see this by /qn options

    4) Manualy - all dirty PC you must solve by this way. I must remove cca 40PC by this way and now I am lucky ;)

    Regards Jerry

    2012年3月9日 下午 01:18
  • Here is a x64 guid:  

    MsiExec.exe /I{87C925D6-F6BF-4FBD-840B-53BAE2648B7B} /lv!* c:\uninstallSEP.txt /qn REMOVE=ALL

    BTW, I used SCCM, which kept failing on machines with non-matching guids, so adding this line helped as well:

    REM Set Error Level to 0 if error 1605 is encountered.  1605 is “product not installed”
    IF ERRORLEVEL 1605 SET ERRORLEV=0
    



    Mike Crowley | MVP
    My Blog -- Planet Technologies

    2012年12月3日 下午 04:07