I have a Server 2016 system that has the MA, Endpoint Security Platform, and Endpoint Security Threat Protection installed (which were installed via an ePO push of the MA, which then kicks off an ENS installation task). Since the installation, this server has been joined to a different domain than the one it was on during installation.
When trying to remove Threat Protection via Control Panel, it gives no message at all; it just doesn't uninstall. When trying to remove it via ePO task, I get the following:
Sent Run Now task "ENS Threat Prevention Uninstall" to "xxxxxx01"
Run now task ENS Threat Prevention Uninstall received.
Run now task started.
Run now task ENS Threat Prevention Uninstall failed.<br/>Details: Product "ENDP_AM_1060" uninstallation failed, reason "Unknown error".<br/>Product "ENDP_GS_1060" uninstallation failed, reason "Unknown error"..
So, I tried the Removal Tool, but it doesn't work, either. I'm starting to think the problem may lie with the system now being on a different domain (which is a new domain for us, so we haven't had any experience such as this before). Attached is the Removal Tool's log file. Thanks in advance!
What I see in logs is:
"Execution Directory: \\*****\***\McAfee\Removal Tool\"
It seems that tool was executed from network folder and that will not work.
Please copy/paste the tool on local HDD and then try clean up. Please make sure to run the tool as administrator.
Please let me know results and upload log if it fails again.
One of the steps may be to boot machine in Safe Mode without the networking and executing the tool.
I hope this helps.
Will it be possible to evaluate this KB against your machine:
*** McAfee product installation or upgrade fails, updates with nnnnxdat.exe or V3_nnnndat.exe packages fail, or fields do not populate (because of missing root certificates)