8 Replies Latest reply on Aug 14, 2013 1:50 PM by SafeBoot

    EEPCv5.2.4 client failing to be removed after migrating to EEPCv6.2.1

    crackerjak

      I have approx 30 machines\users that still have the EEPC5.2.4 client installed after migrating to EEPCv6.2.1. How do I go about rerunning the EEPCv524 uninstall? Can a client task be created within ePO to remove the EEPCv524 client files?

        • 1. Re: EEPCv5.2.4 client failing to be removed after migrating to EEPCv6.2.1

          What are you seeing which makes you think that EEPC5 is still installed? Let's start there.

          • 2. Re: EEPCv5.2.4 client failing to be removed after migrating to EEPCv6.2.1
            crackerjak

            We have migrated over 8k+ machines/users and never noticed this issue. We noticed 5.2.4 on several machines as we were migrating but once the machine rebooted, everything cleared up within ePO. We are currently performing migration cleanup and noticed that 30 machines stll have the eepc 524 client installed and did not go away after rebooting. ePO states the machine has the following products installed.

             

            Agent 4.6.0.2935
            Product Coverage Reports 4.6.0.2935
            SBDE____5130 5.2.4
            Endpoint Encryption for PC 6.2.1.315
            Endpoint Encryption Agent 1.2.1.315


            When I view the contents on the machine, I see the 524 client icon in the taskbar, Folders C:\Program Files (x86)\SafeBoot Tray Manager and C:\Program Files (x86)\SafeBoot with client files included within the folders.

            • 3. Re: EEPCv5.2.4 client failing to be removed after migrating to EEPCv6.2.1

              Is the pre-boot EEPC5 or EEPC6 though?

               

              I am guessing you can try running sbsetup -uninstall under admin rights, as long as the system is fully migrated to EEPC6. Seems a strange situation to be in though.

              • 4. Re: EEPCv5.2.4 client failing to be removed after migrating to EEPCv6.2.1
                crackerjak

                Preboot is EEPC6. I wasn't sure what sbsetup -uninstall with admin rights would do. I haven't been able to recreate the issue to try on a test machine. What is the worst that could happen?

                • 5. Re: EEPCv5.2.4 client failing to be removed after migrating to EEPCv6.2.1

                  worst that can happen is you end up with a BSOD "unable to access boot device" because the EEPC drivers got removed.  So pretty nasty.

                   

                  What's the EEPC5 log saying though? I expect that's throwing all kinds of errors - EEPC5 does not know about EEPC6 so usually it would try to reactivate... Can you post the tail of that log here?

                  • 6. Re: EEPCv5.2.4 client failing to be removed after migrating to EEPCv6.2.1
                    crackerjak

                    The McAfee Endpoint Encryption CLient status does not display an encrypted disk drive and has not connected in a while.

                     

                    SBclientlog.txt

                    3/20/2013 6:50:15 AM Starting Endpoint Encryption for PC Client Manager (v5.2.4)

                    3/20/2013 6:50:21 AM Starting remote access server on port 5556

                    3/20/2013 6:50:21 AM Delaying initial sync for 15 minutes

                    3/20/2013 6:50:21 AM Applying cryption changes

                    3/20/2013 7:05:22 AM Starting synchronization

                    3/20/2013 7:05:22 AM SbFs total space = 20879360 bytes (19.91 MB)

                    3/20/2013 7:05:22 AM SbFs free space = 18634752 bytes (17.77 MB)

                    3/20/2013 7:05:22 AM Connecting to database: "Safeboot Production"

                    3/20/2013 7:05:22 AM Address=IP ADDRESS REMOVED

                    3/20/2013 7:05:22 AM Port=5555

                    3/20/2013 7:05:22 AM Authenticate=Yes

                    3/20/2013 7:05:22 AM Checking for machine configuration updates

                    3/20/2013 7:05:23 AM Checking for user updates

                    3/20/2013 7:05:24 AM Checking for token data updates

                    3/20/2013 7:05:24 AM Updating local token data with database changes for user (ID=000076f6)

                    3/20/2013 7:05:24 AM Updating local token data with database changes for user (ID=00009465)

                    3/20/2013 7:05:25 AM Checking for SSO updates

                    3/20/2013 7:05:25 AM Checking for Local Recovery updates

                    3/20/2013 7:05:25 AM Checking for hashes updates

                    3/20/2013 7:05:25 AM Transferring local audit information to database

                    3/20/2013 7:05:25 AM Checking for file updates

                    3/20/2013 7:05:27 AM Applying configuration

                    3/20/2013 7:05:27 AM Synchronization complete

                    3/20/2013 7:05:27 AM Automatically synchronizing again in 300 minute(s)

                    3/20/2013 7:05:27 AM Applying cryption changes

                    3/20/2013 12:05:27 PM Starting synchronization

                    3/20/2013 12:05:27 PM SbFs total space = 20879360 bytes (19.91 MB)

                    3/20/2013 12:05:27 PM SbFs free space = 18636800 bytes (17.77 MB)

                    3/20/2013 12:05:27 PM Connecting to database: "Safeboot Production"

                    3/20/2013 12:05:27 PM Address=IP ADDRESS REMOVED

                    3/20/2013 12:05:27 PM Port=5555

                    3/20/2013 12:05:27 PM Authenticate=Yes

                    3/20/2013 12:05:27 PM Checking for machine configuration updates

                    3/20/2013 12:05:27 PM Checking for user updates

                    3/20/2013 12:05:28 PM Checking for token data updates

                    3/20/2013 12:05:28 PM Updating local token data with database changes for user (ID=00000ff8)

                    3/20/2013 12:05:28 PM Updating local token data with database changes for user (ID=00009465)

                    3/20/2013 12:05:28 PM Checking for SSO updates

                    3/20/2013 12:05:28 PM Checking for Local Recovery updates

                    3/20/2013 12:05:28 PM Checking for hashes updates

                    3/20/2013 12:05:28 PM Transferring local audit information to database

                    3/20/2013 12:05:28 PM Checking for file updates

                    3/20/2013 12:05:29 PM Applying configuration

                    3/20/2013 12:05:29 PM Synchronization complete

                    3/20/2013 12:05:29 PM Automatically synchronizing again in 300 minute(s)

                    3/20/2013 12:05:29 PM Applying cryption changes

                    3/20/2013 3:45:45 PM Starting synchronization

                    3/20/2013 3:45:45 PM Stopping remote access server

                    3/21/2013 5:25:18 AM ------------------------------------------------------------------------------- -----------

                    3/21/2013 5:25:18 AM Starting Endpoint Encryption for PC Client Manager (v5.2.4)

                    3/21/2013 5:25:23 AM Starting remote access server on port 5556

                    3/21/2013 5:25:23 AM Delaying initial sync for 15 minutes

                    3/21/2013 5:25:23 AM Applying cryption changes

                    3/21/2013 5:38:52 AM Starting synchronization

                    3/21/2013 5:38:52 AM SbFs total space = 20879360 bytes (19.91 MB)

                    3/21/2013 5:38:52 AM SbFs free space = 18634752 bytes (17.77 MB)

                    3/21/2013 5:38:52 AM Connecting to database: "Safeboot Production"

                    3/21/2013 5:38:52 AM Address=IP ADDRESS REMOVED

                    3/21/2013 5:38:52 AM Port=5555

                    3/21/2013 5:38:52 AM Authenticate=Yes

                    3/21/2013 5:38:54 AM Checking for machine configuration updates

                    3/21/2013 5:38:58 AM Checking for user updates

                    3/21/2013 5:39:02 AM Checking for token data updates

                    3/21/2013 5:39:02 AM Checking for SSO updates

                    3/21/2013 5:39:02 AM Checking for Local Recovery updates

                    3/21/2013 5:39:03 AM Checking for hashes updates

                    3/21/2013 5:39:03 AM Transferring local audit information to database

                    3/21/2013 5:39:05 AM Checking for file updates

                    3/21/2013 5:39:09 AM Applying configuration

                    3/21/2013 5:39:09 AM Synchronization complete

                    3/21/2013 5:39:09 AM Automatically synchronizing again in 300 minute(s)

                    3/21/2013 5:39:09 AM Applying cryption changes

                    3/21/2013 5:42:07 AM Starting synchronization

                    3/21/2013 5:42:07 AM Stopping remote access server

                    3/21/2013 6:49:54 AM ------------------------------------------------------------------------------- -----------

                    3/21/2013 6:49:54 AM Starting Endpoint Encryption for PC Client Manager (v5.2.4)

                    3/21/2013 6:49:59 AM Starting remote access server on port 5556

                    3/21/2013 6:50:00 AM Delaying initial sync for 15 minutes

                    3/21/2013 6:50:00 AM Applying cryption changes

                    3/21/2013 6:56:51 AM Starting synchronization

                    3/21/2013 6:56:51 AM Stopping remote access server

                     

                    Message was edited by: crackerjak I will find a few more clients to see if the sbclientlog.txt displays the same information. on 8/9/13 4:41:15 PM CDT
                    • 7. Re: EEPCv5.2.4 client failing to be removed after migrating to EEPCv6.2.1
                      crackerjak

                      sbsetup.exe -uninstall did not work as the computer is currently encrypted. Is there a way to manual uninstall EEPC x5.x

                      • 8. Re: EEPCv5.2.4 client failing to be removed after migrating to EEPCv6.2.1

                        No way other than by hand, removing each registry key and file individually. I imagine there's some permission issue on these few machines which prevented the EEPC6 uninstaller from removing EEPC5.