Unable to create deployment task with Action Uninstall

[rgmyers]

Hi,

I am trying to create a deployment task to uninstall McAfee Agent as it is blocking us being able to upgrade a critical piece of software.  When I try and create a task I have the option to Install and an action with no other options.  

If I create this task and try to duplicate the action and change it to uninstall it is again blank. 

Is this an issue with my rights and access as ePO administrator?

[savidudu]

No this is not the issue with your account.

By default we can not create the uninstall task.

If you want to remove the agent from the machine in that case follow the below steps:

1. Login to McAfee ePO console and go to system tree under systems 

2. select the system where you want to remove the agent

3.click on actions ,select Directory management and select delete

4.A new windows comes asking for confirmation select the sub option which says delete the agent in next agent server communication

this will remove the agent and delete the machine from epo system tree.

thanks 

[cdinet]

To clarify, if there are any other Mcafee products installed, it will only put the agent in unmanaged mode, it will not remove the agent.  It will only actually uninstall the agent if no other products are installed that use the agent.

[rgmyers]

I just need to temp remove the agent and then reinstall in 10 minutes.  I will still have many other McAfee products installed.

[rgmyers]

The goal here is for me to keep the asset inside ePO but to remove the McAfee agent temporarily. I don't want to stop managing this machine though.

[cdinet]

Removing the agent will make it unmanaged, whether you remove the agent completely or put it in unmanaged mode.  If you need the agent not functional for a few moments, it would be better to disable self protection for the agent, then stop all the agent services for the time you need it not functioning.

[rgmyers]

Is there a way to disable self protection for the agent remotely?  Sometimes we are trying to disable it on a sever we don't have remote access to so we can't log in and disable manually.

[cdinet]

There is no way to disable self protection remotely or locally, it is only done via the agent policy.

[rgmyers]

This is where I should create a policy that disables the McAfee agent and break inheritance and give it that policy?

[cdinet]

You can't disable the agent, you just disable self protection and yes, you would need to break inheritance and duplicate the existing policy for that so it doesn't affect other systems.