Problem in deploying ENS (10.6.1.1555)

[User58617863]

Hi All,

I have endpoints here that are not updating automatically and cannot be updated through manual means. Our client are expecting that manual reinstallation is the last resort. I tried deploying Removal Tool via ePO but even that the product deployment failed as soon as I run the client task.

This happens to any client task that I run.

Please see screenshot below:


Thank You.

[LKS]

Hi User58617863,

May i know which product are you trying to uninstall using Removal Tool. Have you tried Client Product Deployment task to uinstall the product. Ensure you select the same product with build number to uninstall the product from client machine.

[AdithyanT]

Hi @User58617863 

Thank you for your post!

The task failure needs to be investigated from the client end. The endpoint product removal tool though, should be the last resort. I would always recommend the use of a "remove" task using product deployment and see if that helps.

The removal task is just as same as a deployment task except for the "action" part which should be selected to remove! I sincerely hope this helps.

Note: This deployment task should use the same package (version) for removal of that product.

[Former Member]

Hello,

Do not use removal tool for uninstall, This should be the last thing to use.

If you are removing the products from client machine in that case create a Product Deployment task in ePO using Remove option in actions.

While uninstallation you can use the same version of product version or latest version of point product.

If this is not helpful please post the logs here or you can also check the masvc.log and mcscript.log for more details and default location is C:\ProgramData\McAfee\Agent\logs

EPR logs can be found at below location:

C:\Windows\Temp\McAfeeLogs\EPR.log

Also if possible please try to send a scheduled task instead of Run Client Task Now.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

[User58617863]

Hi All,

Attaching the logs for your advise please. I still can't remotely remove ENS using client task deployment. The also tried scheduled task but it is not working still.

Thank You.

[LKS]

Hi User58617863,

Hope you got my message in private window. As i checked the logs, i see lot of unsigned Microsoft DLL injection in McAfee process. I do not see McScript log as it has not generated at all. There are only two client task initiated in Masvc log which is "ATP Deployment" and "Run client task now". I do not see any client task for ENS removal.

Please follow the below steps see if that helps :

If you have already tried client task deployment method to remove ENS product, if it failed, then i would suggest you try removing from Control panel on target machine and let me know what happened. 

If the above method does not work, then follow the below method.
Checkin Removal tool in Master Repository.
Create a Client deployment task and ensure you use the below switch and select the module which you have installed on the client machine. --accepteula --ENS
Select the Target machine from system tree-->actions-->agent-->edit task on a single system-->new client task assignment-->mcafee agent-->product deployment-->select the task which you have created.
Select run immediately under schedule type.
Send a wakeup call (select force complete task and policy)-->wait for sometime and check.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a soultion" if this reply resolves your query!

[Former Member]

Hello,

I have checked the logs and able to see that McAfee processes are getting blocked.

I do not see any client task for ENS removal.

This is happening because of the Microsoft unsigned dll injection.

It seems you are using McAfee Agent 5.6.1.308 and this dll injection has been resolved.

If you don't want want to use Removal Tool, Please upgrade the McAfee Agent to version 5.6.2 and try to send the uninstall task and see how to goes.

If you are going to use the removal tool in that case please refer the below steps:

Please follow the below steps see if that helps :

If you have already tried client task deployment method to remove ENS product, if it failed, then i would suggest you try removing from Control panel on target machine and let me know what happened. 

If the above method does not work, then follow the below method.
Check-in EPR tool in Master Repository.
Once the EPR gets checked in, Create a Client deployment task and please make sure you use the below switch and select the module accordingly which you have installed on the client machine. --accepteula --ENS
Select the Target machine from system tree-->actions-->agent-->modify/edit task on a single system-->new client task assignment-->McAfee agent-->product deployment-->select the task which you have created.
Select run immediately under schedule type.
Send a wakeup call (select force complete task and policy)or click on the collect and send props on client machine-->wait for sometime and check.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a solution" if this reply resolves your query!

[User58617863]

Hi All,

I am currently deploying MA 5.6.2 as recommended by Sir @Former Member. Will provide update once successful.

Thank You

[User58617863]

Hi Sir @Former Member and @LKS ,

Agent 5.6.2 is now successfully deployed and removal tool using --accepteula -ens was successful. As I was deploying Platform and TP (October update 2019), this is what is showing now.

[LKS]

Hi User58617863,

Could you please use Client Task deployment task rather using "Run client task now". Run client task now goes on fly to invoke the task and it is not recommended for deployment task. 

Select the target machine from system tree-->Actions-->Agents-->edit task on a single system-->client task assignment-->McAfee Agent-->product deployment-->select the task if you have already created or create a new one-->schedule "Run immediately-->save. Once done, send a wakeup call with "force update task and policy".

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a soultion" if this reply resolves your query!