cancel
Showing results for 
Search instead for 
Did you mean: 
landmissle
Level 8

How to manually uninstall Policy Auditor Agent

Jump to solution

  Hi all,

  I'm having some problems removing the Policy Auditory (PA) agent remotely on a few systems. Is there a way to manually remove the agent from the client.   I'm thinking some command line execuable with the appropriate switches....The obvious removal method via Add/Remove Programs does not work.

   Thanks for any insight.

Message was edited by: landmissle on 8/19/11 3:43:50 PM CDT
0 Kudos
1 Solution

Accepted Solutions
landmissle
Level 8

Re: How to manually uninstall Policy Auditor Agent

Jump to solution

  Hi all,

  I've see that there have been a few views of this post, so, in case there's an interest, I'll post the reply I received from McAfee support;

 

. Stop the following services under windows services:

  mcafee audit manager service

  mcafee framework service

. Stop the following processes in windows task manager:

Pasystray.exe

. Delete the following registry entries:

Hklm\software\network associates\epolicyorchestrator\application plugins\policyau5X00  (where X=some number)

Hklm\software\networkassociates\epolicy orchestrator\application plugins\auengine5X00 (where X=some number)

Hklm\system\current controlset\services\mcafeeauditmanager

. Delete the following directories:

Program files\mcafee\audit manager

Program files\mcafee\audit content update

Program files\mcafee\policy auditor agent

Document and settings\all users\applicationdata\mcafee\common framework\current\policyau5X00

Hklm\software\microsoft\windows\currentversion\uninstall\[48804885.....CCD04}\   <<<<  this should be the correct uninstall entryfor mcafee policy auditor agent 

Hklm\software\microsoft\windows\currentversion\installer\userdata\s-1-5-18\588408847.......5DC40\    <<<  this should be the correct installer entryfor mcafee policy auditor agent

Reboot

My notes:  Some of they registry entries may be hard to find depending on which version of Windows you're using (Windows XP vs. Windows 7 for example.) and may not be in the exact location as listed. Navigate to a parent location you can find and then search on the strings givien (viz. 48804885 & 588408847).

In addition, the directories to be removed will vary slighty between Windows XP and Windows 7.


Hope this proves useful.

0 Kudos
1 Reply
landmissle
Level 8

Re: How to manually uninstall Policy Auditor Agent

Jump to solution

  Hi all,

  I've see that there have been a few views of this post, so, in case there's an interest, I'll post the reply I received from McAfee support;

 

. Stop the following services under windows services:

  mcafee audit manager service

  mcafee framework service

. Stop the following processes in windows task manager:

Pasystray.exe

. Delete the following registry entries:

Hklm\software\network associates\epolicyorchestrator\application plugins\policyau5X00  (where X=some number)

Hklm\software\networkassociates\epolicy orchestrator\application plugins\auengine5X00 (where X=some number)

Hklm\system\current controlset\services\mcafeeauditmanager

. Delete the following directories:

Program files\mcafee\audit manager

Program files\mcafee\audit content update

Program files\mcafee\policy auditor agent

Document and settings\all users\applicationdata\mcafee\common framework\current\policyau5X00

Hklm\software\microsoft\windows\currentversion\uninstall\[48804885.....CCD04}\   <<<<  this should be the correct uninstall entryfor mcafee policy auditor agent 

Hklm\software\microsoft\windows\currentversion\installer\userdata\s-1-5-18\588408847.......5DC40\    <<<  this should be the correct installer entryfor mcafee policy auditor agent

Reboot

My notes:  Some of they registry entries may be hard to find depending on which version of Windows you're using (Windows XP vs. Windows 7 for example.) and may not be in the exact location as listed. Navigate to a parent location you can find and then search on the strings givien (viz. 48804885 & 588408847).

In addition, the directories to be removed will vary slighty between Windows XP and Windows 7.


Hope this proves useful.

0 Kudos