installed safeboot v5.2.3 via network, rebooted and tried to synchronize and start the encryption. I was left with a blank eepc client status window and hitting the synchronize button did nothing. I had the admin push safeboot to the pc again and rebooted after 10 minutes (this method has been successful for us before) but was still left with a blank eepc client status window. the encryption never started so we had safeboot removed & rebooted for this pc. after trying this, the eepc icon is still on the taskbar and the client status window is still empty. i can boot into xp no problems and the safeboot login screen has never appeared once on startup since we started. after reading through this forum i tried to use the wintech cd to remove eepc. this was unsuccessful since the drive was really never encrypted and it gave me some error message.so i tried the restore the mbr and that too was unsuccessful. i tried to run from safe mode sbsetup -uninstall and keep getting the message "endpoint encryption boot protection is still enabled on this machine. the client can not be uninstalled while boot protection is still enabled" how can i completly remove safeboot from this pc?
Solved! Go to Solution.
Install it manually using the package created from EEM, don't push it out with EPO.
This is looking more and more like a permissions issue to me.
As I said, the error may be a little misleading - it really means "Boot protection is not for sure disabled" - it will throw the same message if the boot protection is enabled, or if it can't talk to the driver to ask.
sbclinetlog.txt is empty
another thing - when i check the mcafee agent console on this pc it is telling me scheduler task safeboot install is finished and successful
Try to add those two lines:
Then reboot PC and try to uninstall during first 15 minutes:
If this does not work, you may need to shutdown some Safeboot services via registry.
you're not going to be able to fix this by tinkering with services.
let's start from the beginning - what OS are you using? XP, Vista, 32bit, 64bit etc?
After determining that disk is not encrypted and pre-boot is not installed, you can shut off numerous SafeBoot services via booting from BartPE and working with local hard drive Windows registry.
Look for ones starting with "SB" or having "SafeBoot" in it. There is also one disk filter that uses SafeBoot service.
Keep track of changes that you make, so you could reverse them if needed.
Not, if is going to check things properly. Anyone can BSOD any machine, that is easy, but I don't think that is the point.
running xp, 32bit, sp3
i havent tried killing and reg entries yet. i justy want to see if there is a simpler way to remove boot protection first so i can uninstall this completly and then re-encrypt it.
its now a test machine so i would like to solve this before i blue screen it and end up re-imaging it.