Hello,
I have found one of the Best way to uninstall SEP clients in a large numbers with the help of GPO.I have tested this in my test environment. By the help of this Article you will be able to uninstall the SEP client through Group Policy Object.
What you have to do is create a startup or shut down script.
Note:-In SEPM side you need to remove uninstall password.
- To Remove Uninstall Password settings in SEPM go to
SEPM console->Clients tab ->Policies ->General Settings-> Security Settings.
To Get Uninstall String in SEP client
Uninstall String is different for Every version of Sep client
SEP Client 12.1.671.4971.105
MsiExec.exe /I{A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8}
SEP 12.1.2
MsiExec.exe /I {C2103AF2-E66C-446B-9791-9207840EC821}
Follow these steps to get Uninstall Strings.
- Start->RUN->Regedit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A3AEEA68-AC93-4F6F-8D2D-78BBF7E422B8}.
Create Batch File
@Echo off
MsiExec.exe /x {C2103AF2-E66C-446B-9791-9207840EC821} /qn
Exit
Create Batch file as uninstall.bat and save it into AD net logon folder (Shared Location).
How to run Batch file Through Group Policy
1. Start Run ->GPMC.MSC.
2. Right click on Domain name and select create a GPO in the domain
3. Give the GPO name (SEP uninstall)
4. Edit Newly Created GPO SEP uninstall.
5. Go to Computer Configuration ->Policies ->Windows Settings ->Select Script (Startup/Shutdown).
6. Select Startup Script ->Add.
7. Browse Batch file ( Shared Location) -> Ok.
8. Apply Ok.
9. Select AD OU where you want to apply and select Link an Existing GPO.
10. Select GPO and OK.
10 Restart Computer.
11.This process will take 5 to 10 min. for removing Sep client.
Note:-
- In SEPM side you need to remove uninstall password.
- I have tested this process in my testing environment successfully
- Please use this article First in your test environment then apply to your production environment.
I hope this Article will helpfull to you all……