Maybe you can create an ePO package with the McAfee EEDK that woud execute a bat or a script that would create the registry key
you can create assigned client task for these computers to deploy vse 8.8 using the option (Run at every policy enforcement)
I believe this can be done in the following steps:
- In the AP Policy in EPO make sure that "Prevent McAfee Services from being stopped" is selected
- In the front end GUI McAfee Agent policy (General Policies in 4.x) password protect access to the AP features (I don't have access to ePO right at the moment so I don't remember the exact verbage here) efeectively graying out the AP configurations on the endpoint.
Thus, the admin would need a password as well as deselecting the "Prevent McAfee Files from being stopped" option to be able to uninstall from Add/Remove?
Please anyone, correct me if I'm wrong.