Removing Symantec Mail Security 7.0 for Microsoft Exchange after Add or Remove Programs does not work


Article ID: 157425


Updated On:


Mail Security for Microsoft Exchange


 Instructions to manually remove the components of Symantec Mail Security for Microsoft Exchange 7.0 after Add or Remove programs does not work.


 WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified. 

The following document explains how to back up the registry: How to back up, edit, and restore the registry in Windows 7 and Windows Server 2008


1.  Stop Services.

Open a command prompt and enter the following commands:


net stop smsmse

net stop SAVFMSESpamStatsManager

net stop “Symantec Mail Security Management Service”

sc delete smsmse

sc delete SAVFMSESpamStatsManager

sc delete “Symantec Mail Security Management Service”


 2. Unregister SMSMSE from LiveUpdate:

Open a command prompt on the computer where SMSMSE is installed and run the following command:

32-bit OS: regsvr32.exe /u "C:\Program Files\Symantec\SMSMSE\<version>\Server\SAVFMSELU.dll"
64-bit OS: regsvr32.exe /u "C:\Program Files (x86)\Symantec\SMSMSE\<version>\Server\SAVFMSELU.dll"

NOTE: Change the value of <version> to the appropriate version of SMSMSE installed.  The following is an example for SMSMSE 7.0 on a 64-bit OS:

regsvr32.exe /u "C:\Program Files (x86)\Symantec\SMSMSE\7.0\Server\SAVFMSELU.dll"

3. Remove Symantec Mail Security for Microsoft Exchange Web site in Internet Services Manager.

    1. Open Start > Administrative Tools >Computer Management.
    2. Navigate to Services and Applications > Internet Information Services
    3. On the right hand side menu expand Server Name > Sites.
    4. Right click Symantec Mail Security for Microsoft Exchange and select Remove.
    5. On the right hand side menu expand Server Name > Application Pools.
    6. Right click on SMSMSEAppPool and select Remove.
    7. Open a command prompt and enter the following commands: 


4. Remove registry keys.

a. Exit all programs.
b. Open regedit and remove the following folders if they are present:














HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Symantec Mail Security for Microsoft Exchange

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog\Application\Symantec Mail Security Managed Components

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\Symantec Mail Security Management Service








Note: You should also verify the enumerated control set entries for SMSMSE services.  e.g. CurrentControlSet001, CurrentControlSet002..

 5. Remove Exchange Transport Agents (if on a HUB server).

a. Open the Exchange Management Shell and enter the following commands:

Uninstall-Transportagent -identity "SMSMSESMTPAgent"
Uninstall-TransportAgent -identity "SMSMSERoutingAgent"
Restart-Service MSExchangeTransport


6. Remove file system folders.

            C:\ProgramData\Symantec\Definitions\SymcData\virusdefs32 (Windows 2008 only)
            C:\Program Files (x86)\Common Files\Symantec Shared\definitions
            C:\Program Files (x86)\Common Files\Symantec Shared\SymcData\virusdefs32 (Windows 2003 only)
            C:\Program Files (x86)\Symantec\SMSMSE

            c:\Program Files (x86)\Symantec\CMaF

            NOTE: These paths are the default locations; adjust the paths if you installed the program into a different location.    

7. Delete Administration Console icon from desktop.

Remove Rights from domain user account on Exchange 2010/2013

When you install SMSMSE 7.0 on Microsoft Exchange Server 2010/2013, the service account specified during installation is granted ApplicationImpersonation and LogonAsService rights. These rights are not removed when you uninstall SMSMSE 7.0 . Removing these rights is optional but recommended if you do not plan to run SMSMSE in your network with this user account.

WARNING: Do not remove the rights given to this user if the same user is being used on other Exchange servers in the same domain.

1. Click Start > All Programs >Microsoft Exchange Server 2010 > Exchange Management Shell. It may take a few moments for a prompt to appear.
2. At the prompt, type the following, and then press Enter:

remove-ManagementRoleAssignment SMSMSE_RBAC_<domain\username>

where <domain\username> is the correct domain and user name.

3. Press Y at the confirmation prompt and then press Enter.
4. Click Start > Administrative Tools > Local Security Policy
5. In the left pane, expand Local Policies and click User Rights Assignment.
6. In the right pane, double-click Log on as a service.
7. On the Local Security Setting tab, click the correct user name.
8. Click the Remove button.
9. Click OK.

8. Remove transport agent entries

Open agents.config which can be found under "<Drive>:\Program Files\Microsoft\Exchange Server\<version>\TransportRoles\Shared" and remove the following two lines:

<agent name="SMSMSERoutingAgent" baseType="Microsoft.Exchange.Data.Transport.Routing.RoutingAgent" classFactory="Symantec.MailSecurity.Server.TransportAgent.SMSMSERoutingAgentFactory" assemblyPath="<drive>\Program Files (x86)\Symantec\SMSMSE\<version>\Server\Symantec.MailSecurity.Server.TransportAgent.dll" enabled="true" />
<agent name="SMSMSESMTPAgent" baseType="Microsoft.Exchange.Data.Transport.Smtp.SmtpReceiveAgent" classFactory="Symantec.MailSecurity.Server.TransportAgent.SMSMSESMTPAgentFactory" assemblyPath="<drive>\Program Files (x86)\Symantec\SMSMSE\<version>\Server\Symantec.MailSecurity.Server.TransportAgent.dll" enabled="true" />