Batch file (startup script) for uninstalling Symantec Endpoint Encryption Device Control client's deployed via GPO.


Article ID: 157313


Updated On:


Symantec Products


A customer requires the details for creating a batch file (startup script) to assist in the uninstallation of a Symantec Endpoint Encryption Device Control client that was installed via GPO.


You cannot use the automatic uninstall feature in the GPO software installation package because the Device Control uninstall procedure is password protected. To uninstall Device Control you must use a startup script.


Create a new batch file containing the following command, the uninstall command in the batch file must be written on one line:

msiexec.exe /x "\\<full UNC path to Device Control shared install folder>\ SymantecEndpointEncryptionDeviceControlClient.msi" /qn UNINSTALL_PASSWORD=<uninstall password>

  • Replace the full UNC path to Device Control's shared installation folder with the appropriate path.
  • Replace the uninstall password with the appropriate uninstall password.
  • Save the file with a .BAT extension
      For additional details on usage, please refer to the attached Symantec Endpoint Encryption Device Control Installation Guide (pdf page 33).



SEE-DC 8.2.0 Installation Guide.pdf get_app