Link to home
Start Free TrialLog in
Avatar of GuruGary
GuruGaryFlag for United States of America

asked on

How do we uninstall all client installations of Symantec AntiVirus Corporate 9.0 to prepare for migration to another product

We have a customer that is running Symantec AntiVirus Corprate 9.0.  They have about 40 client computers (all running Windows XP) on a Windows 2003 Server domain.  All computers have the SAV client which was pushed out through the Symantec System Center Console.  We are planning to migrate them to another product (AVG Network Edition) upon expiration of their current license so we are trying to figure out the best way to uninstall the SAV client from each PC from the console or from the server.  What is the best way to get all the clients uninstalled when we are ready to install the new product (without having to go to each PC to manually un-install)?
Avatar of masnrock
masnrock
Flag of United States of America image

Do you have any sort of software deployment solutions running right now, such as LiveState?
Avatar of GuruGary

ASKER

No, they do not have any deployment solutions running right now.  But they are on a domain so I guess we could use some sort of group policy or something like that.  The client software was installed / deployed through the Symantec Center Console, so I figured they would have a way to un-install / un-deploy the software through the same console.  Or if not then hopefully somebody else has run into this and has come up with an automated solution.
One of your options right from the System Center Console should be to 'un-install' clients.
Have you physically been on site, or are you preparing to go?
I mentioned in another post that I am migrating about 1700 Symantec clients to ePO/McAfee - and have to physically touch about 10% of the clients to clean out the registry remnants of Symantec.
Make sure that someone has the correct username and password for the account on the SCC.
I would love an option to "un-install clients".  That is what I am looking for, but I spent about an hour going through every option and menu I could think of on the System Center Console.

Yes, I have been on site.  They are a regular customer so I am usually there at least once a week.  We actually did the Symantec 9.0 install about 11 months ago, but we keep running into problems with the Symantec product.  One of the guys that works with me is more familiar with the SAV, and he is the one that set it up.  But he is only familiar with manual un-installations and didn't know how to do it automatically.  So we are familiar with this customer and their network, and we do have the password for the SCC unlock and for the manual un-installs.

Can you tell me how to get to the "uninstall clients"?
Avatar of JRHIT
JRHIT

I am familiar with the Symantec console, however I have never been able to do an Uninstall, only client installs...  

Couldn't you run the uninstall app from a group policy or if you are using a Novell Network then push it out with ZEN.
Ignore my comment about novell, I didn't read everything.

I have thought about using Group Policy.  I was hoping there would be a better solution - like something that is documented or supported by Symantec, or at least something that somebody has tried before in this situation.

The best thing I can think of at this point is to find the installation ID, and try a script that uses MsiExec.exe to force an uninstall.  I'm not sure how reliable this will be, and I don't know of a way to verify completion, but I don't know what else to do at this point.

Any other ideas?
You can add REMOVE=ALL to the VPREMOTE.DAT file that is used by System Center for client deploment.  I would also change the REBOOT flag to Force.  There is some documentation for the commands in the Symantec documentation.
Thanks, Lynbos.  I just spent some time looking at this, and I think this may work if I can find the documentation.  The very little documentation I have been able to find on this is all for SAV 10.0 and we are running 9.0.  I assume it works the same for both?  Do you know where I can find documentation on this?  After I change the VPREMOTE.DAT do I use the Symantec Console to "push out" the uninstallation to selected computers like I was going to do an install?
I believe the commands are the same for 10.o as for 9.0.  The documnetation is in the installation manual, it can be found at ftp://ftp.symantec.com/public/english_us_canada/products/symantec_antivirus/symantec_antivirus_corp/9.0/manuals/savinst.pdf .  If you use the "ClientRemote Install" in SSC the VPREMOTE.DAT for it is in a sub-folder "ClientRemote Inatallation".  The syntax that worked for me in the dat file was        setup.exe /s /v"/qn INSTALLSERVER=0 REMOVE=ALL REBOOT=Force"    
Thank you very much for the link to the manual.  The installation manual had a lot of information, but it doesn't really document UN-installing.  The only thing it mentions about uninstallating the client is that you are supposed to do it from the control panel on the client PC.  It discusses installation in detail, so if I put your syntax in the VPREMOTE.DAT file, then when / how does it get executed?  I want to test this while minimizing the risk that all clients will have their antivirus client uninstalled.  

I am also not sure which VPREMOTE.DAT file to modify.  I see 3 of them on the AV Server:
C:\Program Files\Symantec\Symantec System Center\Deployment\NT Remote Client Installation\VPREMOTE.DAT
C:\Program Files\Symantec\Symantec System Center\Deployment\Server Rollout\CLIENTS\WIN32\vpremote.dat
C:\Program Files\Symantec\Symantec System Center\Deployment\Server Rollout\SERVER\WINNT\vpremote.dat

Since the information provided is mostly for installation, I am going to take a guess that once I make the change to the VPREMOTE.DAT file(s) then to uninstall the client software I run the SSC, Tools -> NT Client Install?
ASKER CERTIFIED SOLUTION
Avatar of lynbos
lynbos

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Thanks, Lynbos.  I'll try it tomorrow on 1 or 2 machines.
Hi, Lynbos.  I think we are making some progress, but there are still issues.  I made the changes you suggested, and did an "NT Client Install" on 1 computer for a test.  I then went to that computer, but the client was still on that computer.  So I went to run the SAV client on the test computer and a dialog box came up saying "Please enter the uninstall password".

Although I have the password, I am hoping to find an automated solution that either does not need the password, or where I can give the password to the uninstallation from the server so it does not prompt.

So it looks like it did initiate the uninstall, but was not able to complete due to the password.

Any suggestions?
You'll need to go into the SSC snd find the "Client Administrator Only Options"  should be in the "All Tasks" "Symantec AntiVirus" area.  Uncheck "Ask for password to allow uninstall of Symantec AntiVirus client".
Thanks - I just disabled the "Ask for password".  I'll give it time to update the settings on the clients and try it again ... probably tomorrow.
Hi, Lynbos.  It looks like it worked on the 2nd test - Thanks!!  Telling it to install the client silently un-installed SAV, then automatically rebooted.  I'll award the points to you and close this on Monday ... so I have time to ask any more questions in case they come up Monday when I finish my testing.
Awesome!  It worked great.  Thanks, Lunbos.  Saved me a bunch of time.
Your welcome
Hi There, after you have changed the VPREMOTE.dat file do you run the clientremoteInstall as normal??? i have tried that and nothing works