How to uninstall ENS from AD

[Former Member]

Hi guys,

Is there any command or solution to uninstall McAfee ENS modules using Active Directory? Most of the clients are not connected to the ePO anymore so we just have got the AD. Can we do it using a batch file?

Thank you in advance.

Trellix Endpoint Security 

[rfranci · Accepted solution]

Hi @Former Member ,

Thankyou for reaching us on community!

There are 2 ways to do it:

1. Uninstall by using uninstall String.
2. Use EPR command line.

1.Uninstalling by uninstall sting :

• Go to HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
• Search the "uninstall string" value for each module of ENS:

McAfee Endpoint Security Firewall

McAfee Endpoint Security Adaptive Threat Protection

McAfee Endpoint Security Web Control

McAfee Endpoint Security Threat Prevention

McAfee Endpoint Security Platform

Example :

MsiExec.exe /X{B16DE18D-4D5D-45F8-92BD-8DC17225AFD8}

• Copy the value of "uninstall string" registry and run it in cmd to uninstall.

2.EPR command line uninstall:

• Download Endpoint product removal (EPR) tool from product download site.

https://www.mcafee.com/enterprise/en-in/downloads/my-products.html

• Run the EPR tool from CMD by using below commands :
• To uninstall all McAfee products, use command --accepteula --ALL .
• To uninstall only Endpoint security --accepteula -- ENS
• To uninstall ENS and McAfee Agent use command --accepteula –ENS –MA

NOTE: The machine would reboot automatically after uninstalling. To avoid this on critical servers, use switch " --noreboot"  in the command line. But it is important to reboot the machine after uninstall to clear the drivers and its reference from the memory.

Example:

Endpointremovaltool.exe --accepteula --ENS --noreboot

Endpointremovaltool.exe --accepteula ----ENS --MA

• Use the same commands in a batch file to meet your requirements. This need the EPR tool to be present on the machine.

I hope this helps.

- Rohit Francis 

[Former Member]

@rfranci 

Thank you for your reply.

First of all I need to run it from AD so I need to add the switch /qb at the end of command line. Secondly the problem is that while uninstalling McAfee Endpoint Security Threat Prevention it shows an error that the CMD should be closed while the command is run by CMD itself!