A customer requires the details for creating a batch file (startup script) to assist in the uninstallation of a Symantec Endpoint Encryption Device Control client that was installed via GPO.

You cannot use the automatic uninstall feature in the GPO software installation package because the Device Control uninstall procedure is password protected. To uninstall Device Control you must use a startup script.

Create a new batch file containing the following command, the uninstall command in the batch file must be written on one line:

msiexec.exe /x "\\<full UNC path to Device Control shared install folder>\ SymantecEndpointEncryptionDeviceControlClient.msi" /qn UNINSTALL_PASSWORD=<uninstall password>
 

• Replace the full UNC path to Device Control's shared installation folder with the appropriate path.
• Replace the uninstall password with the appropriate uninstall password.
• Save the file with a .BAT extension
    For additional details on usage, please refer to the attached Symantec Endpoint Encryption Device Control Installation Guide (pdf page 33).