Staj 5 Posted October 27, 2020 Share Posted October 27, 2020 Just like I did 4 years ago I'm having trouble removing the Agent (~6.5) using SCCM and I can't just wipe all the computers like I did 4 years ago either, I need an actual solution to this frustrating problem that continues to suck the life from me. Please don't recommend the AV Uninstaller tool that requires safe mode, I need to automate this at scale using SCCM. ESET Endpoint Security 6.6 - 6.7 can be removed using an Uninstall Task from ERA6. The applied Agent Policy has "Password protected setup" not set" The applied Endpoint Security Policy has "Password protected settings" disabled and "Set Password" not set, for both <6.x and >7.0. The following don't work: SCCM Uninstall Step for Deployment Type As SYSTEM: msiexec /x {41F12F70-5FA9-43F5-94F4-53B54EB4EEC4} /q As Local Administrator: msiexec /x {41F12F70-5FA9-43F5-94F4-53B54EB4EEC4} No error code As Local Administrator: msiexec /x {41F12F70-5FA9-43F5-94F4-53B54EB4EEC4} /q /lvx* "C:\ProgramData\ESET\Uninstall.log" No error code Application remains listed as installed even after reboot. "Stop Managing (Uninstall ERA Agent)" Task from ERA6 Failure listed in ERA6, not further information The following does work: Manually uninstalling it from Add/Remove Programs (No Password) I've tested these scenarios, and combinations there of, on a number of systems now. Based on the Uninstall.log produced from above, it deletes the C:\ProgramData\ESET\RemoteAdministrator\ directory tree after an initial complaint that a number of binary files in C:\Program Files\ESET\RemoteAdministrator\Agent\ are being held in use by ERAAgent process, I'm assuming the service was still running at that point before it was stopped by the StopServices action. The C:\Program Files\ESET\ directory tree is removed by the end of the entire process and the log states "Product: ESET Remote Administrator Agent -- Removal completed successfully.",, "Windows Installer removed the product. Product Name: ESET Remote Administrator Agent." with an error code of 0 but the product isn't removed from the system program list, it still appears installed. Attempts to uninstall it again fail because the Configuration database is missing from C:\ProgramData\ESET\RemoteAdministrator\ What do I do here? Link to comment Share on other sites More sharing options...
Staj 5 Posted October 27, 2020 Author Share Posted October 27, 2020 Attempting to install Agent 7.2.1266.0 will clean up a malfunctioning ERA Agent 6 install, running the Agent 7.2.1266.0 setup again afterwards will lead to a successful Agent 7.2.1266.0 installation. Link to comment Share on other sites More sharing options...
Staj 5 Posted October 28, 2020 Author Share Posted October 28, 2020 We also get situations where "Stop Managing (Uninstall ERA Agent)" Task from ERA6 seems to remove it (Task remains as "running" in ERA6) but it's still listed as installed, even after reboot, just like the other methods. Link to comment Share on other sites More sharing options...
Recommended Posts