4 Replies Latest reply on Apr 19, 2017 4:10 PM by mblower

    Removing of DE 7.1.3 doesnt work

    warlord711

      Hi ! One of our customer want to move from DE to Bitlocker, so we have to decrypt and remove some systems.

       

      We have 2 TAGS for this task:

       

      1st TAG is to assign a Policy to the systems. This policy is for DE> Product Settings and has "Policy active" deselected, so Systems should decrypt as soon as they got this rule assigned

      2nd TAG is for uninstalling DE+DE Agent

       

       

      TAG 1 works, at least in the details for the clients, the Tab DriveEncryptions shows the status disabled

       

      TAG 2, or the uninstall tasks, always fails:

       

      23.3.2017, 10:00:11

      Info

      Scheduler

      Next time(local) of task remove DE_7.1: Donnerstag, 23. März 2017 12:00:00

      23.3.2017, 10:00:11

      Info

      Updater

      Checking update packages from repository ePOSA_DEEI-AV03.

      23.3.2017, 10:00:11

      Info

      Updater

      Initializing update...

      23.3.2017, 10:00:11

      Info

      Updater

      Verifying catalog.z.

      23.3.2017, 10:00:11

      Info

      Updater

      Extracting catalog.z.

      23.3.2017, 10:00:11

      Info

      Updater

      Loading update configuration from: catalog.xml

      23.3.2017, 10:00:12

      Info

      Updater

      Verifying detect.mcs.

      23.3.2017, 10:00:12

      Info

      Updater

      Uninstalling EEPC.

      23.3.2017, 10:00:20

      Info

      Updater

      Error occurred while uninstalling EEPC.

      23.3.2017, 10:00:20

      Info

      Updater

      Verifying detect.mcs.

      23.3.2017, 10:00:20

      Info

      Updater

      Uninstalling EEADMIN_1000.

      23.3.2017, 10:00:23

      Info

      Updater

      Error occurred while uninstalling EEADMIN_1000.

      23.3.2017, 10:00:23

      Info

      Updater

      Checking for software conflicts.

      23.3.2017, 10:00:23

      Info

      Updater

      Update Finished

        • 1. Re: Removing of DE 7.1.3 doesnt work
          davidp64

          Hi warlord,

           

          The reason behind of failing tag 2 is that if the tag1 is matched the circumference then it will first decrypt the entire disk.because without decryption we cant perform uninstall task for that machine..

           

          I think there was a confliction for these  task..If the entire disk is decrypted than the tag 2 will work as excepted.

           

          Thanks

          • 2. Re: Removing of DE 7.1.3 doesnt work
            warlord711

            Hi !

             

            The uninstall task is triggered every day at noon, but fails for weeks now. So I dont think that a still running or not completed decryption is the problem.

            Also the DriveEncryption Tag for the system shows DriveEncryption as disabled.

            • 3. Re: Removing of DE 7.1.3 doesnt work
              davidp64

              In this case you need to validate on one client machine manually to see the decryption status..

              • 4. Re: Removing of DE 7.1.3 doesnt work
                mblower

                If you can confirm with one hundred percent certainty that the drive is decrypted, and you are no longer seeing a preboot authentication prompt at boot time, then you could try uninstalling the software manually.

                 

                1.  Open the Registry Editor  (Start >> Run >> regedit)

                2.  Navigate to HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

                3.  Find the entry for McAfee Drive Encryption, and for McAfee Drive Encryption Agent.

                4.  Locate the "UninstallString" and copy it to NotePad, or somewhere else where you can get to it.

                5.  Replace the /i with a /x in each command.

                6.  Close the Registry Editor.

                7.  Open an elevated command prompt window, and run each command. It will accept the standard msiexec command line switches, such as /qb, or /qn, etc.

                 

                For example, to uninstall McAfee Drive Encryption 7.1.3.604, the command would be:  MsiExec.exe /x{B5C389EA-89A6-4BA5-BD36-FE119DE31E81}

                The command to uninstall McAfee DE Agent 7.1.3.604 is:  MsiExec.exe /x{0B392DFA-18CB-4A3E-B0B6-3C82359B86C8}

                 

                There is probably a log file somewhere that has more details about why the uninstall is failing.  You could check  C:\Program Files\McAfee\Endpoint Encryption Agent\MfeEpe.log, that may also hold some clues.