6 Replies Latest reply on Nov 18, 2014 9:37 AM by rdeakin

    VSE8.8 wont uninstall FEP

    rdeakin

      Hello,

       

      We are setting up a POC/trial for McAfee Endpoint suite, and the idea is that it replaces Microsoft Forefront Endpoint Protection 2010 (FEP).  We created an ePO server, added some servers to manage and pushed the agent to the servers.  We then pushed VSE 8.8 to the servers and now see all the servers have both antivirus running VSE and FEP.  I thought VSE was supposed to uninstall FEP?  Is there some special option I need to enable to get it to uninstall the FEP software?

       

      We are using:

      McAfee ePO version: 5.1.0

      McAfee VSE version: 8.8.04001

       

      Trying to uninstall:

      Microsoft Forefront Endpoint Protection (2.1.1116.0)

      Microsoft Forefront Endpoint Protection (4.5.216.0)

       

      This is for around 500 servers, so we really need it to work...

        • 1. Re: VSE8.8 wont uninstall FEP
          Peter M

          Moved to ePO for better support - Moderator

          • 2. Re: VSE8.8 wont uninstall FEP
            frank_enser

            Hi,

             

            see KB72251 for products that should be uninstalled and for instructions on how to get a installation file for a custom uninstallation routine.

             

            Regards,

            Frank

            • 3. Re: VSE8.8 wont uninstall FEP
              rdeakin

              Hi Frank,

               

              Thanks for the info.  Microsoft Forefront Endpoint Protection 2010 is listed there, so it should uninstall on its own, but its not.  We've tested on a few servers now.

               

              Thanks,

               

              Ry

              • 4. Re: VSE8.8 wont uninstall FEP
                frank_enser

                Hi,

                 

                since I don't have any experience with FEP, just a guess: does FEP has any kind of self protection in place? Perhaps FEP blocks the removal?

                • 5. Re: VSE8.8 wont uninstall FEP
                  rdeakin

                  Hi Frank,

                   

                  Thanks for the reply.

                   

                  As far as I know there isnt such an option, and I can uninstall it fine when I do it manually via Control Panel.  The problem seems to be the UnInst.ini file.  Inside that there is a part for Microsoft Forefront Endpoint Protection 2010 Evaluation Version but not Microsoft Forefront Endpoint Protection 2010.  And so the items its checking for aren't correct   For example in the UnInst.ini it shows:

                   

                  eInstallCheck_0=eRegistryValue

                  InstallCheck0_0=HKLM

                  InstallCheck1_0=SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Security Client

                  InstallCheck2_0=DisplayName

                  InstallCheck3_0=String

                  InstallCheck4_0=Microsoft Forefront Endpoint Protection 2010

                   

                  eInstallCheck_1=eRegistryValue

                  InstallCheck0_1=HKLM

                  InstallCheck1_1=SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Security Client

                  InstallCheck2_1=DisplayVersion

                  InstallCheck3_1=String

                  InstallCheck4_1=2.0.

                   

                  Both the DisplayName and DisplayVersion are wrong.  I can try to put in the correct values and see if it works.

                  • 6. Re: VSE8.8 wont uninstall FEP
                    rdeakin

                    Its working now.  I just changed the UnInst.ini to:

                     

                    eInstallCheck_0=eRegistryValue

                    InstallCheck0_0=HKLM

                    InstallCheck1_0=SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Security Client

                    InstallCheck2_0=DisplayName

                    InstallCheck3_0=String

                    InstallCheck4_0=Microsoft Forefront Endpoint Protection

                     

                    And deleted the whole version check part, that way it works for the versions including patched versions with slightly different version numbers.