I have created uninstall package for SEP 11. Its working fine when run manually or via Schedule task. But when push via SCCM it  prompting for uninstall password. Please help.

Using below command in a batch file.

reg DELETE "HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC" /v smc_exit_test /f

"C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\smc" -stop

reg DELETE "HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC" /v SmcInstData /f
reg DELETE "HKLM\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\SMC" /v SmcInstData /f

REG ADD "HKLM\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\AdministratorOnly\Security" /v LockUnloadServices /d 0 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\Symantec\Symantec Endpoint Protection\AV\AdministratorOnly\Security" /v UseVPUninstallPassword /d 0 /t REG_DWORD /f

MSIEXEC /X {4117BB0F-FF94-4373-B5A1-D9799EA9DBEA} REMOVE=ALL REMOVE=ALL /qb! REBOOT=ReallySuppress

RD /S /Q "%ProgramFiles(x86)%\Symantec"



0 Comments   [ + ] Show Comments


Please log in to comment

Community Chosen Answer


As far as I remember there is a proper procedure given on symantec site to uninstall SEP. I am not sure where, it has been quite some time when I saw it.. a few years. But you can script those steps.

Answered 05/21/2013 by: piyushnasa
Red Belt

Please log in to comment



REMOVE=ALL is repeating, so you may remove one.

"prompting for uninstall password" - do you mean administrator password?

When uninstalling via sccm, do you configure it to run under system account?

Answered 05/15/2013 by: SnowLyric
Second Degree Brown Belt

  • prompting for password means, when trying to uninstall it requires password to uninstall SEP. I am running it under System account. With SCCM push it not able to delete "HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC" registry key.
  • In first place, how do you know it's prompting for password if it's running under sccm account?
  • I have made the SCCM program to run in Normal mode. thats the way i am able to get the popup.
    • what do you mean by normal mode? I couldn't find any such in sccm
Please log in to comment

I am strongly against to the following lines

RD /S /Q "%ProgramFiles(x86)%\Symantec"



Answered 05/16/2013 by: jagadeish
Red Belt

Please log in to comment
Answer this question or Comment on this question for clarity