Removing Symantec Mail Security for Microsoft Exchange 6.5 (SMSMSE) for Microsoft Exchange 2010/2007 after Add or Remove Programs does not work
search cancel

Removing Symantec Mail Security for Microsoft Exchange 6.5 (SMSMSE) for Microsoft Exchange 2010/2007 after Add or Remove Programs does not work

book

Article ID: 152176

calendar_today

Updated On:

Products

Mail Security for Microsoft Exchange

Issue/Introduction

You want to know how to manually remove Symantec Information Foundation Mail Security 6.5 for Microsoft Exchange 2010/2007.

 

Resolution

WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified.

The following document explains how to back up the registry: How to back up, edit, and restore the registry in Windows 7 and Windows Server 2008

 

1.  Stop Services.

Open a command prompt and enter the following commands:

net stop smsmse
net stop SAVFMSESpamStatsManager
sc delete smsmse
sc delete SAVFMSESpamStatsManager

 2. Unregister SMSMSE from LiveUpdate:

Open a command prompt on the computer where SMSMSE is installed and run the following command:

32-bit OS: regsvr32.exe /u "C:\Program Files\Symantec\SMSMSE\<version>\Server\SAVFMSELU.dll"
64-bit OS: regsvr32.exe /u "C:\Program Files (x86)\Symantec\SMSMSE\<version>\Server\SAVFMSELU.dll"

NOTE: Change the value of <version> to the appropriate version of SMSMSE installed.  The following is an example for SMSMSE 6.5 on 32-bit OS:

regsvr32.exe /u "C:\Program Files\Symantec\SMSMSE\6.5\Server\SAVFMSELU.dll"

3. Remove Symantec Mail Security for Microsoft Exchange Web site in Internet Services Manager.

    1. Open Start|Administrative Tools|Computer Management.
    2. Navigate to Services and Applications > Internet Information Services
    3. On the right hand side menu expand Server Name > Sites.
    4. Right click Symantec Mail Security for Microsoft Exchange and select Remove.
    5. On the right hand side menu expand Server Name > Application Pools.
    6. Right click on SMSMSEAppPool and select Remove.
    7. Open a command prompt and enter the following commands:

iisreset

4. Remove registry keys.

a. Exit all programs.
b. Open regedit and remove the following folders if they are present:

 

HKEY_CLASSES_ROOT\Installer\Products\40819E30664329F42984895E6037B3B8
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\40819E30664329F42984895E6037B3B8
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{03E91804-3466-4F92-9248-98E506733B8B}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\Cmaf
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps\SMSMSE6.5
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps\SMSVersionSupport
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\InstalledApps\SymcData-virusdefs32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\SharedDefs\SymcData-virusdefs32
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Symantec\SMSMSE
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\SMSMSEPERF
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Symantec Mail Security for Microsoft Exchange
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Symantec Mail Security Managed Components
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIS\VirusScan
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SAVFMSESpamStatsManager
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SMSMSE

Note: You should also verify the enumerated control set entries for SMSMSE services.  e.g. CurrentControlSet001, CurrentControlSet002..

 

5. Remove Exchange Transport Agents (if on a HUB server).

a. Open the Exchange Management Shell and enter the following commands:

Uninstall-Transportagent -identity "SMSMSESMTPAgent"
Uninstall-TransportAgent -identity "SMSMSERoutingAgent"
Restart-Service MSExchangeTransport

 

6. Remove file system folders.

            C:\ProgramData\Symantec\Definitions\SymcData\virusdefs32 (Windows 2008 only)
            C:\Program Files (x86)\Common Files\Symantec Shared\definitions
            C:\Program Files (x86)\Common Files\Symantec Shared\SymcData\virusdefs32 (Windows 2003 only)
            C:\Program Files (x86)\Symantec\SMSMSE
            c:\Program Files (x86)\Symantec\CMaF


            NOTE: These paths are the default locations; adjust the paths if you installed the program into a different location.    
            

7. Delete Administration Console icon from desktop.

Remove Rights from domain user account on Exchange 2010


When you install SMSMSE 6.5 on Microsoft Exchange Server 2010, the service account specified during installation is granted ApplicationImpersonation and LogonAsService rights. These rights are not removed when you uninstall SMSMSE 6.5. Removing these rights is optional but recommended if you do not plan to run SMSMSE in your network with this user account.

WARNING: Do not remove the rights given to this user if the same user is being used on other Exchange servers in the same domain.


1. Click Start > All Programs >Microsoft Exchange Server 2010 > Exchange Management Shell. It may take a few moments for a prompt to appear.
2. At the prompt, type the following, and then press Enter:

remove-ManagementRoleAssignment SMSMSE_RBAC_<domain\username>


where <domain\username> is the correct domain and user name.


3. Press Y at the confirmation prompt and then press Enter.
4. Click Start > Administrative Tools > Local Security Policy
5. In the left pane, expand Local Policies and click User Rights Assignment.
6. In the right pane, double-click Log on as a service.
7. On the Local Security Setting tab, click the correct user name.
8. Click the Remove button.
9. Click OK.
 

 

8. Remove transport agent entries

Open agents.config which can be found under "<Drive>:\Program Files\Microsoft\Exchange Server\<version>\TransportRoles\Shared" and remove the following two lines:

<agent name="SMSMSERoutingAgent" baseType="Microsoft.Exchange.Data.Transport.Routing.RoutingAgent" classFactory="Symantec.MailSecurity.Server.TransportAgent.SMSMSERoutingAgentFactory" assemblyPath="<drive>\Program Files (x86)\Symantec\SMSMSE\<version>\Server\Symantec.MailSecurity.Server.TransportAgent.dll" enabled="true" />
<agent name="SMSMSESMTPAgent" baseType="Microsoft.Exchange.Data.Transport.Smtp.SmtpReceiveAgent" classFactory="Symantec.MailSecurity.Server.TransportAgent.SMSMSESMTPAgentFactory" assemblyPath="<drive>\Program Files (x86)\Symantec\SMSMSE\<version>\Server\Symantec.MailSecurity.Server.TransportAgent.dll" enabled="true" />

 

 


Applies To

  • SMSMSE 6.5 (For SMSMSE 7.x, follow Tech200443) 
  • Microsoft Exchange Server 2010 or Microsoft Exchange Server 2007
Powered by Wolken Software