I have decided that I no longer want this installed on our PCs but I don't see it listed as a Software title. I was going to create a report to see which ones still need to be done and can't find it.


0 Comments   [ + ] Show Comments


Please log in to comment



It may show in inventory under Windows>Type>Patch Software

If not, create a software inventory item that uses a custom inventory rule to verify this directory exists:


You can report on that software inventory item to see how many have it installed.

Then, you can script the removal by doing something like this:

Create a script to uninstall Windows Search by verifying service Wsearch exists, stop Wsearch and then run a command to uninstall:

c:\windows\$ntUninstallKB940157\spuninst\spuninst.exe /qn /norestart

 Appears to need a restart to completely remove. You could also use your software inventory item above to create a machine smart label to target the uninstall.

Answered 08/06/2012 by: jknox
Red Belt

  • look for %systemroot%\$NtUninstallKB940157$\spuninst\spuninst.exe you can even create a k1000 script that veifies this files exists if it does then run the same command with silent switch
  • Oops, left out spuninst.exe. Thanks!
  • No problem
  • Some of the computers have already had it uninstalled but they fit under this software inventory because that file is still there. I also found that on XP the service is wSearch so that gives me a quick list that will work. Thanks. I really appreciate you taking the time to answer questions. I learn so much.
    • Oh, so the uninstall using spuninst.exe doesn't remove the folder? Does it leave spuninst.exe itself afterwards? If not, you could modify the rule to look for that.
  • glad you found the correct service name, I think it changed between version 3 and 4. When we were running xp we just killed the service so the users saw nothing. If you are using sus I believe you can also withdraw that push and sus will take it away.
  • Also found on google spunist does not support conventional msi switches /qn /norestart these are the switches it supports •/? : Show the list of installation switches. • /u : Use Unattended mode. • /f : Force other programs to quit when the computer shuts down. • /z : Do not restart when the installation is completed. •/q : Use Quiet mode (no user interaction).
    • Really? Pretty sure that's what I used. Will have to check my KBOX.
      • looks like either will work
  • I did not realize that either till I found that goggling, it surprised me, have used the switches you mentioned in the past. I did more searching and have found both as usable switches. http://support.microsoft.com/kb/886185 http://coreworx.blogspot.com/2010/08/how-to-uninstall-microsoft-patch-using.html This one lists msi style switches, go figure http://support.microsoft.com/kb/262841
Please log in to comment

On your K1000 go to inventory and look under the service tab

search for cisvc and these are the machines with search/index service installed

If you just want to stop it from running you can disable the service with a k1000 script

verify the this key exists


and if it does

net stop cisvc
REG add "HKLM\SYSTEM\CurrentControlSet\Services\CiSvc" /v Start /t REG_DWORD /d 4 /f


Answered 08/06/2012 by: SMal.tmcc
Red Belt

Please log in to comment
Answer this question or Comment on this question for clarity