ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

CleanWipe fails to fully remove Endpoint Protection 12.1 with error "Could not obtain SeDebugPrivilege"


Article ID: 157045


Updated On:


Endpoint Protection


CleanWipe fails to fully remove Symantec Endpoint Protection (SEP) 12.1. Some files, folders, and Registry keys may be left behind.

You may also see the error, "Could not obtain SeDebugPrivilege. Please ensure current user/group is listed in Local Security Policy/User Rights Assignment/Debug programs Policy".


CleanWipe requires the administrative priviledge "Debug programs" (SeDebugPriviledge) in order to successfully remove SEP 12.1.


Please confirm that the account which is running CleanWipe has the "Debug programs" priviledge.

This setting can be viewed within the local machines Domain or Local Group Policy at Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Debug programs.


Note: After changing the windows local policy , logoff/logon, gpupdate or restarting the machine may be required for the changes to take effect.