It's possible to make Removal tool to remove only different components of ENS not all --ENS.
etc. --accepteula --ATP (for remove only ENS ATP)
--accepteula --FW (for remove only ENS FW)
Because sometime I have an issue with ATP, in ePO client properties - under "Products" menu ATP not showing, but from machine side I can see error in MA "view Security status" ATP issue...
To resolve this issue I need to run removal tool for --ENS and remove all ENS components and later redeploy all products.
It would be great to get possibility to remove only ATP.
@denn That is not currently a feature within the tool. However, it is something we could look to provide feedback to Engineering on for potential inclusion in a future release.
However, have you attempted uninstalling ATP locally so you can do it alone? EPR is intended for last resort use only when all other uninstall methods have failed. This is a contributor to why there is not a modular removal option currently.
Was my reply helpful?
If this information was helpful in any way, or answered your question, will you please select "Accept as Solution" in my reply, or give kudos as appropriate, so together we can help other members?
Please escalate this to engineering. I think this also will be good feature for other McAfee costumers.
Haven't tried to uninstall ATP locally. But for example if it fails on 100 machines I need to connect locally to all 100 endpoints and uninstall ATP. Not good practise
Now I am using Removal tool with ePO client task. But there is only possibility to remove all --ENS components.
Bear in mind that not even the legacy ripper tool was capable of uninstalling individual modules, and I personally believe this should not be added as this feature will avoid escalations against our component because customers attempt to use the removal tool as a primary method to uninstall our products. However, feel free to post your product enhancement request on the following link
Within this registry for ATP module >> \
HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Network Associates\ePolicy Orchestrator\Application Plugins\ENDPATP_XXXX << exists a key named > Uninstall Command < it contains a command line that can be executed via CMD as Admin>
"C:\Program Files (x86)\McAfee\Endpoint Security\Adaptive Threat Protection\RepairCache\SetupATP.exe" /x /removeespsynchronously
If the product is password protected, please add /PASSWORD=YOUR-password-IN-plain-Text
For example >
"C:\Program Files (x86)\McAfee\Endpoint Security\Adaptive Threat Protection\RepairCache\SetupATP.exe" /x /removeespsynchronously /PASSWORD=NeedToOpenAticketWithSupport
- Command line can be added on a script and deploy it via a 3rd party application, however, needs to be tested in a controlled environment.
- The suggestion should not be used as a primary method of uninstalling individual modules. Therefore, you should open a ticket and let support investigate why the module(s) cannot be uninstalled via normal methods >> ePO or control panel.
I think latest MPR tool can achieve this. Download it here and test (you need valid grant number):