asked on

Remotely uninstall application

I'm trying to use the psexec.exe command to remotely uninstall SEPM (Symantec Endpoint Protection Manager) client.

I use different variations with different results and none work.

1. >psexec.exe \\computername -u domain\admin -p password msiexec {3C1AE512-3C37-44FA-BA42-ABB721EC5B1D}
This one just hangs......

2. >psexec.exe \\192.168.1.50 -u domain\admin -p password {3C1AE512-3C37-44FA-BA42-ABB721EC5B1D}
psexec could not start {3C1AE512-3C37-44FA-BA42-ABB721EC5B1D} on 192.468.1.50: The system cannot find the file specified.

Seems like a great tool if I can get it ot uninstall the symantec client.

Mark Damen

msiexec needs an additional switch, -x to tell it to work in uninstall mode.

Mark Damen

enclose the whole command in quotes like so

psexec.exe \\computername -u domain\admin -p password "msiexec -x {3C1AE512-3C37-44FA-BA42-ABB721EC5B1D}"

tolinrome

ASKER

I wasnt even sure what the msiexec meant, just saw it on a blog, not sure if it's applicable to SEPM client - Im thinking it means too uninstall a MSI extension file (program).
What if the program isnt MSI - what would I use?

Mark Damen

I have used this method to uninstall other Symantec products, so it will likely work. The string here {3C1AE512-3C37-44FA-BA42-ABB721EC5B1D} needs to be the correct install string for SEPM. Have you checked this, or did it come from the same blog?

Other things to note: Before using this method on Symantec AV Corporate client, I had to roll out 2 registry settings to change and then disable the uninstall password. Otherwise the psexec command would hang up half way through, with no way of providing the install password.

Awinish

Ca you check the below link.

http://www.symantec.com/connect/forums/remotely-uninstall-symantec-endpoint-protection-110-mr2-using-msiexec

tolinrome

ASKER

I used the quotes just as you mentioned still no go. The string is from the client.
psexec.exe \\IPaddress -u domain\admin -p password "msiexec -x {3C1AE512-3C37-44FA-BA42-ABB721EC5B1D}"

The error message I get is: PsExec could not start msiexec -x {3C1AE512-3C37-44FA-BA42-ABB721EC5B1D} on 192.168.1.50: the system cannot find the file specified.

So I figure it's not using an msi file?

Also, do you have or know of a script to uninstall\disable the password since we do have it on clients.

Unbelieveable how Symantec cant just have an uninstall remote utility within SEPM.

Awinish

You need to disable the password from the server side.

You can refer below link.as exact people have posted various script.
http://98.129.119.162/connect/forums/silent-uninstall-symantec-end-point-agent-without-supply-password

http://twesbutler.posterous.com/2010/07/07/symantec-endpoint-protection-10-or-11-uninstall-script
https://www.experts-exchange.com/questions/23010690/Batch-script-for-Symantec-Endpoint-Protection-removal.html

tolinrome

ASKER

The problem is that I'm not even getting to the poin twhere it asks for a password. Apparantly PsExec.exe cannot find the file or whatever it's looking for to uninstall the program.

ASKER CERTIFIED SOLUTION

Sudeep Sharma

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial