Cannot Uninstall SESC From Endpoints (using MsiExec)

RE: Cannot Uninstall SESC From Endpoints (using MsiExec)

Eric Meinders — Tue, 06 Apr 2021 14:18:25 GMT

Thanks Christian,

themoreyouknow.gif

RE: Cannot Uninstall SESC From Endpoints (using MsiExec)

QC — Tue, 06 Apr 2021 14:14:01 GMT

Hello Eric Meinders,

the quotes are a requirement of PowerShell, the old shell (cmd) and script engines don't require them.

Christian

RE: Cannot Uninstall SESC From Endpoints (using MsiExec)

Eric Meinders — Tue, 06 Apr 2021 14:08:01 GMT

I think your reply just highlighted the issue -- the quotes are required. Per the KB, the syntax is msiexec.exe /X{GUID} but it looks like this needs to be changed to msiexec.exe /X"{GUID}". I haven't tested with /qn or reboot suppression yet, but it would appear the local/manual msiexec.exe commands work now with the quotes.

RE: Cannot Uninstall SESC From Endpoints (using MsiExec)

Sophos User930 — Tue, 06 Apr 2021 11:41:40 GMT

In that case, you probably just want to do a foreach product where Publisher match Sophos.

Some will be MSI, some will not, so these are 2 cases to handle.

The ones that aren't MSI based, the exe may require additional switches to the value in the uninstallstring. So you probably will need to account for that.

What about this as a starting point.

/cfs-file/__key/communityserver-discussions-components-files/3/productremove.ps1.txt

I've defaulted it not to run the uninstall commands just print them.

Set $Uninstall = $false to $Uninstall = $true.

Also, I've not populated:

$ProductData = @(
[PSCustomObject]@{DisplayName = ''; AdditionalUninstallArgument ='' }
[PSCustomObject]@{DisplayName = ''; AdditionalUninstallArgument ='' }
)

But this is where you would put the DisplayName of the component and any additional command line options to supply when running the removal of it.

Believe it or not, I've not actually tested it beyond just printing out the commands but maybe something to start with,

RE: Cannot Uninstall SESC From Endpoints (using MsiExec)

QC — Tue, 06 Apr 2021 09:38:36 GMT

Hello Eric Meinders,

msiexec.exe /x {GUID} is the correct format. That you get the Windows Installer popup suggests a syntax error, specifically a missing /option (e.g. the /x). Did you indeed use msiexec.exe /x"{FED1005D-CBC8-45D5-A288-FFC7BB304121}"? Even with a non-existing product code you should get the Are you sure ... prompt.
The full path is interpreted as path to a Product.msi, i.e. an installer package in the file system, not to the meta-information in the registry. That's why you get the could not be opened error..

@Sophos User930: This is the on-premise SESC, there is no Sophos Endpoint Agent and hence no uninstallcli.exe.

Christian

RE: Cannot Delete SEC From Devices (MsiExec)

Sophos User930 — Mon, 05 Apr 2021 10:49:40 GMT

Does the uninstallcli.exe (C:\Program Files\Sophos\Sophos Endpoint Agent\) not help or are things broken?

RE: Cannot Delete SEC From Devices (MsiExec)

GlennSen — Mon, 05 Apr 2021 08:33:07 GMT

Hi Eric,

With regards to this query, I would suggest you reach your TAM and discussed this as Profisional Services might be required to archive this script removal on your environment. If you don't know your TAM, you can drop an DM to me and I'll provide it to you.