Trend Micro CSM master password lost or forgotten how to logon?

Thanks, I think.
A 'C'?
(lowest grade - not helpful?)
If there were other parts not understood, it would have been nice to respond with some comment about progress made, or not made on problem.

Good luck on keeping it all together, we know it is not all that easy.

Thanx for the suggestion = very good non technical solution. Normally I am all for non technical solutions - "it is all about solving business needs through technolgy, but don't let the technology become the end game" kinda philosophy.

However, in this case your suggestion did not help me solve the problem. In the end the business owner made previous network admin "remember" the password.
As I said in question - this was my first EE post.

I figured:
a)  there were no other suggestions
b) yours was a resonable answer/suggestion, but id not actually help me in this case
c) since we have found the password, I should close the question

So in my opoinion, the answer would have been worth a or b if I actually used it and it solved the problem, but since it didn't actually help me, I awarded c = average for me.

Since closing this question, I read a very long post on points with numerous contributors and topic of "points hounds", etc. VERY interesting read, especially to give insight into the various things that motivate experts to contirbute to this forum. Actually, I accept all sides of that debate, but tend to lean toward the "whatever motivates some-one to help others is a good thing" notion.

since discovering EE 2 months ago, I have found it to be Amasingly useful resource. Found the answers to more than dozen question and only made one post! So I am interested to know whether my logic in awarding the points is resonable. I certainly don't want to discourage experts answering my questions in future.

cheers
Jason

To reset the password:
 1.Go to the <installed drive>\Program Files\Trend Micro\Security server\PCCSRV\Private directory.
 2.Open the ofcserver.ini file using Notepad or any text editor.
 3.Look for the MasterPwd= parameter under the [INI_SERVER_SECTION] section.
 4.Replace the MasterPwd= value with 70.
 5. Save and close the ofcserver.ini file.
 6.Restart TM Security server  Master Service.
 7. Log into the Security dashboard  and type 1 as the password

Ignore the squares in the text above.   Not sure when they came from.

Thanks,
Re: "I figured:................"

That is more what I'd be looking for as the question closes. While recognizing your claim as newbie, I was left wondering why it had to close so quickly.

> I read a very long post on points with numerous contributors and topic of "points hounds", etc. VERY interesting read, especially

I think I missed that, may not be able to relate. I can repeat my own observations, that over time and across TAs, there can be very productive comments by many for long time for fewest points, and brief repeating comments for most points.

> So I am interested to know whether my logic in awarding the points is resonable. I certainly don't want to discourage experts answering my questions in future.

Your logic is so much more than reasonable (now) than normal, all too often a closure misses the comment on logic, or resolution, perhaps  a little like yourself, I can get more learnings from questions of others than of questions of my own. As for points, I do not know what this was, I cannot see it displayed here, my attraction was probably word choice like "master password", points being irrelevant. I am not sufficiently familiar with product to warrant much in points. For grading, I care less what I receive and used to try to grade more like you, while many ever complain for anything other than A. When grading, however, I do more often use the A, since I would more typically award to more than one comment, and if there is a way to grade them differently, I do not know. So I distribute the points to reward more to the better answers, and that is another reason to start lower offers of points, the potential to not get those ten different and impressive great comments.

In general I now try to start points lower, and increase them as I get contributions that warrant. Easy to increase, harder to decrease. Without a reason to expect the answers or evel of difficulty contributions I would not begin with max points, but not neglect the possibility either, such as for those times of emergency or deadline...

GaryFuqua > Ignore the squares in the text above.   Not sure when they came from.

They are typically special symbols that come in pairs to wrap text. Among the more frequent are 'smart quotes'. I tend to put formatted text into notepad first and then copy it in, and find that NotePad cleans out most of that well enough

Jason,

From your closing remark, while lacking the experience here, you seem far more mature than majority of the experts here, so have a belated "Welcome" into the fold, may we meet again in some TA down the road

Thank you @GaryFuqua!!

I really appreicate you posting here even though you didn't get points for it!

Just a note - for whatever reason, the actual fix to this problem is GaryFugus's. It works for the newer Trend Micro Security Suite server too.

The accepted solution from Sunbow, while technically correct, is not helpful at all. "Call the manufacturer" is not the kind of response people coming to EE are looking for, especially when an actual helpful solution is available as GaryFugus showed. Good thing I read the comments!

To uninstall an SMB client when you don't have the password, make the following registry change on the client computer.    

- HKLM\Software\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc
- AllowUninstall=1

This will allow you to uninstall the client portion without needing a password.

Thanks to you GaryFuqua ... I just ran into the same problem and your solution is the one that is the "Expert Solution" I was looking for.

Sunbow... it looks like you are doing more of a diservice than you are being helpful to those of us who pay to play here.
As I come here when I am looking for answers to those tangents in IT that I don't commonly see.
Please allow posts to mature before jumping in and giving your "expert opinion" and providing less than an "Expert" answer.

I appreciate www.expert-exchange.com and I am glad that Gary gave a proper answer even though the credit for doing so didn't come to him.

I was on HOLD for 3 hours before i got the solution GaryFuqua posted here. I was going to post it but sawl he got it here first. i wish i sawl his post / cry ... thanks :)

I spent at least 3 hours on hold too before I got it too.     :-)   It must be some sort of standard with Trend Micro...

I'm glad I came across this. It's saving me a lot of headache.

nice one garyfugua

I had the same problem this morning and tried Gary's solution.  I put "70" in as the password, no luck.  I tried !CRYPT!70 as the prior password had !CRYPT! preceding the digits.  Still no luck.  The browser based login reports "! Error on page."

If it didn't work, I would call Trend Micro.    Maybe they have another trick.

Since this is Experts Exchange and not Business Admins Exchange the solution shouldn't have been posted! I did have a fuller answer though:

Since you have forgotten the password on the console here is the procedure
to reset the password:
Reset the password using this procedure:
1.      Back up the Ofcscan.ini file in the \PCCSRV directory.
2.      Open the Ofcscan.ini file and look for the Master_Pwd parameter.
3.      Change the encrypted value of Master_Pwd to "70".
4.      Save the Ofcscan.ini file.
5.      Restart the OfficeScan master service.
6.      Log on using "1" as the new management console password.
7.      After successfully logging in the Management Console, it is
recommended that you change the password for security purposes.

 To bypass the uninstall password on the client machine here is the
procedure:

 To uninstall OSCE:
1.      Run regedit.exe.
2.      Locate the following registry key:

 HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\Misc.
3.      Double-click the "Allow Uninstall" key.
4.      Set the value to 1.
5.      Save the changes made.
6.      Try performing the uninstallation again.

 After this you can uninstall the CSm version 2 and install the version 3.
Please remember to reboot the machine and clear the directory structures
after uninstalling version 2.0

Surely this question is fine in Experts Exchange and it just helped me, whats with the attitude maxclarke?

On the client side of uninstalling trend, I've been using the following batch to remove it. It's the automated version of the "Manual" removal method that trend has on their website and it seems to work on XP, Vista and 7. I only made it because I had 75 computers to this on and only about 4 hours to get it done. It doesn't take it out of add/remove but i'm sure someone can mod it a little to make that happen. It'll be a key that needs to be deleted somewhere in the registry under HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall.

To use it, just run the batch, reboot the machine and run that batch again.
(copy the below to notepad and save it as "RemoveTrend.bat" or something)

@ECHO OFF
CLS
ECHO Remove Trend Micro
ECHO.
ECHO.

ECHO Stopping Services...
net stop "OfficeScanNT Listener"
net stop "OfficeScanNT RealTimeScan"
net stop "OfficeScanNT Personal Firewall"
ECHO.
ECHO.

ECHO Killing Processes...
TASKKILL /F /im PccNTMon.exe

ECHO Deleting Services...
sc delete Ntrtscan
sc delete Tmlisten
sc delete TmFilter
sc delete VSApiNt
sc delete VSApiNt
sc delete TMPreFilter
sc delete TM_CFW
sc delete OfcPfwSvc
ECHO.
ECHO.

ECHO Deleting Registry Keys...
REG DELETE /f "HKLM\SOFTWARE\TrendMicro"
REG DELETE /f "HKLM\Microsoft\Windows\CurrentVersion\Run" /v "OfficeScanNT"
REG DELETE /f "HKLM\Microsoft\Windows\CurrentVersion\Run" /v "OfficeScanNT Monitor"
ECHO.
ECHO.

ECHO Deleting Files...
RD /S/Q "%ALLUSERSPROFILE%\Start Menu\Programs\OfficeScan Client"
RD /S/Q "%PROGRAMFILES%\Trend Micro"

How amazing, five years since I first posted this question, Ifind myself in the same position again, and a google search landed me right back at my own question on EE.

All credit to GaryFuqua for posting the kind of technical solution I was looking for at the time. Unfortuantely after I had closed the question and awarded the points.
cheers
Gary

Great work MaxClarke - Helped me alot