Uninstall Symantec Endpoint Protection(SEP) client Through GPO

 What you have to do is create a startup or shut down script.

Note:-In SEPM side you need to remove uninstall password.

1. To Remove Uninstall Password settings in SEPM go to

SEPM console->Clients tab ->Policies ->General Settings-> Security Settings.

 

To Get Uninstall String in SEP client

Uninstall String is different for Every version of Sep client

SEP Client  12.1.671.4971.105

MsiExec.exe /I{A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8}

SEP 12.1.2

MsiExec.exe /I {C2103AF2-E66C-446B-9791-9207840EC821}

Follow these steps to get Uninstall Strings.

1. Start->RUN->Regedit
2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8}.

 

 

Create Batch File

@Echo off

MsiExec.exe /x {C2103AF2-E66C-446B-9791-9207840EC821}  /qn

Exit

Create Batch file as uninstall.bat and save it into AD net logon folder (Shared Location).

How to run Batch file Through Group Policy

1. Start Run ->GPMC.MSC. 

2. Right click on Domain name and select create a GPO in the domain

3. Give the GPO name (SEP uninstall)

4. Edit Newly Created GPO SEP uninstall.

5. Go to Computer Configuration ->Policies ->Windows Settings ->Select Script (Startup/Shutdown).

6. Select Startup Script ->Add.

7. Browse Batch file ( Shared Location) -> Ok.

 

8. Apply Ok.

9. Select AD OU where you want to apply and  select Link an Existing GPO.

10. Select GPO and OK.

 

10 Restart Computer.

11.This process will take 5 to 10 min. for removing Sep client.