Link to home
Start Free TrialLog in
Avatar of Lourens van Dyk
Lourens van DykFlag for South Africa

asked on

Create GPO to remove Kaspersky Endpoint Cloud Endpoints on workstations

To whom it may concern
Hope you are well.  We have Kaspersky Endpoint Cloud installed on our network.  We are moving to Sophos Endpoint and need to uninstall the Kaspersky Endpoints on the network.

Domain Environment:  Windows 2008 R2 Standard
Domain Name:  homemakers-sa.co.za
Server VM Specs:
Intel Xeon CPU 5410 @ 2.33GHz
4GB Ram
64-bit OS
135GB HDD

The Kaspersky Endpoint Cloud console is in the cloud and displays the endpoints installed in the environment and not working like the old one where you have your console onsite and have the option to create a policy to uninstall.  What is the correct procedure to remove Kaspersky from the network so that I can deploy and install Sophos AV Endpoint.
Please let me know if you require more information.

Kind Regards
Lourensvd
Avatar of dfke
dfke

Hi,

read up here.

Cheers
Avatar of Lourens van Dyk

ASKER

Hi dfke

Thank you for your reply.  The link goes to Kaspersky Endpoint Security 10 for Windows (for workstations and file servers).  We use the Kaspersky Endpoint Cloud product that you have to log in on the web.  Will the procedure to remove differ?
Seems that process assumed that it was installed via a Software Installation Policy
Right-click the installation package and select All Tasks → Remove.

Is this the case?
Hi Shaun

The installation was done on a manual way by logging onto the Kaspersky Cloud Console at:
https://cloud.kaspersky.com/?locale=en&logonContext=6oY8edyib58aN0mkkT2uA9-Nm8b6sWnOaEqSZHhnEk2PZkkhxvZozp-x7Xodz2W0VhaSZNhSRrQHJTB1T0LjSyBZ4E-gXgbgjy4rfW7xpE5yfozA5vB25uAdgKwUcdgu3v0p0caQhCM10OABDgnCBw2

Downloading the client installation package and installing it on each client.

So the now the endpoint is installed on the client PC's and registering to the portal and pulling its policies and licensing from the cloud portal.

So now we want to find a way to uninstall this endpoint either via a command line script that runs at startup or something to initiate the uninstall of the Kaspersky Endpoint in the background so that we can remove it and be able to deploy our Sophos Endpoint Setup Package.

Kind Regards
Locate the Package in
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Look for the UninstallString, run it on one computers as a test then report back
Hi Shaun
I checked in the registry location, but unfortunately Kaspersky is not listed.  I checked on the DC as well and have installed the package on a test PC and also the same. I did search through the registry and came across:  
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9C475A3CE16432A43BC4AC5EC5E3FDB8
I'll attach screen shots as well.
Don't know if it will help.
klmover-path.jpg
klmover-screen.jpg
Just as a test on one computer run
<Path to setup.exe>\setup.exe /x

Open in new window

https://support.kaspersky.com/9360#cmd
Hi Shaun

I ran the command as requested.  I even tried adding the /s as well for silent uninstall, but Kaspersky does not uninstall.  It takes the command, but nothing happens.  I have attached the output.  Don't know if the cloud install needs something extra.  I just renamed the file to kes.exe for easy command line.
command-line-output.docx
This question needs an answer!
Become an EE member today
7 DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.