Products

Protection for SharePoint Servers

Issue/Introduction

Resolution

Open the command prompt using the administrator privileges and execute the command 'iisreset /stop' as shown in the Screenshot #1 to stop the IIS.

Screenshot #1

Stop the "Symantec Protection 6.0 for SharePoint Servers" service from services.msc. See the reference section 'Steps to stop Service' to know the steps to stop the SPSS service.

Remove the SPSSEnabledServer entry from the SPSSObjects table and SPSS 6.0 settings from the SharePoint farm using the following steps:

i. Open the command prompt using the administrator privileges
ii. Run the following command on windows command prompt
'cd <Install Dir>\Installer' [See the below Screenshot #2]

Screenshot #2

iii. Start the Debugview (Dbgview.exe) using the administrator privileges and select the Capture Global Win32 option of capture menu. See reference section 'How to enable logging on Debugview' for details.
iv. Check whether the ConfigureSystem.exe, ConfigureFarm.exe or ConfigureFarmSPS2003.exe exists at the location specified in the step 3 ii. If these exe files do not exist, copy the files provided along with this document to the same location (step 3 ii) according to the SPSS version.
v. Execute the command 'ConfigureSystem.exe Unmark'. Check whether the highlighted entry in the Screenshot # 3 exists in the Dbgview.exe window. Verify if the SPSSObject table does not have the "SPSSEnabledServer" entry for that server. See reference section 'Verify SPSSEnableServer entry in the SPSSObject table in the SharePoint Configuration database' to check the "SPSSEnabledServer " entry.

Screenshot #3

vi. Run the command 'ConfigureFarm.exe Remove' as mentioned in the Screenshot #4. check whether the entry "Existing properties removed..." exists in the Dbgview.exe window.

Screenshot #4

   4. Uninstall the SPSS features using the following steps:

   i. This step is applicable for CA server (Application Server) ONLY. Take the backup of uninstall.bat from <Install Dir>\Installer\ location. If the .bat file does not exist at this location, copy 'uninstall.bat' provided with his document into this location. Modify uninstall.bat as shown in the Screenshot #5.

Screenshot #5

DEPLOYURL is the URL of SharePoint Central Admin site e.g. http://<machine name>:<port>"
SHAREPOINTBINPATH = "%programfiles%\Common Files\Microsoft Shared\Web Server Extensions\15\BIN"
FEATUREID = "e68048cd-73bf-4b07-9e13-6373acdf0d07"

ii. Execute the uninstall.bat from the command prompt as per the Screenshot # 6.

Screenshot # 6

5.   Delete the 'SymantecProtectionForSharepointServer' folder from the below location:
%programfiles%\Common Files\Microsoft Shared\Web Server Extensions\15\TEMPLATE\FEATURES

6.   Stop the SharePoint Administration Service

7. Take the back up of SharePoint's [Central Administrator Site] Web.config file. Click here to identify the location of SharePoint's web.config. Modify the web.config as mentioned below.

•   Remove the following tags from SharePoint web.config file
1.   <SafeControl Assembly="Symantec.SPSS.AdminConsole, Version=6.0.5.6, Culture=neutral, PublicKeyToken=37224a1b3cce3996" Namespace="Symantec.SPSS.AdminConsole" TypeName="*" Safe="True" />
2.   <SafeControl Assembly="RJS.Web.WebControl.PopCalendar.Ajax.Net, Version=1.0.2616.22725, Culture=neutral, PublicKeyToken=5bac9568331177db" Namespace="RJS.Web.WebControl" TypeName="*" Safe="True" />

Remove the SPSS entries from registry:

i. Take the backup of the registry. See reference section 'Steps to take back up of registry' for steps to take the backup of the registry.
ii. Copy the RemoveAllReg.exe provided along with this document to " <Install Dir>\Installer\" folder.
iii. Execute the RemoveAllReg.exe as show in the below Screenshot # 7. Following command will create list of registry entries to be removed on "C:\list.txt".

Screenshot # 7

iv. Open the list.txt file. Search the highlighted GUID in the registry and delete the entries. Please note that those registry entries are under HKEY_LOCAL_MACHINE. After deletion verify that entry of "Symantec Protection 6.0 for SharePoint Servers" has been removed from Add/Remove program files of the window's control panel.

FullPath is SOFTWARE\Classes\Installer\Features\8F64C9BC1B7B89C4FACBF10C33A889BD
sub key tree is8F64C9BC1B7B89C4FACBF10C33A889BD

FullPath is SOFTWARE\Classes\Installer\Products\8F64C9BC1B7B89C4FACBF10C33A889BD
sub key tree is8F64C9BC1B7B89C4FACBF10C33A889BD

FullPath is SOFTWARE\Classes\Installer\UpgradeCodes\E5AE2D1D08645C141AF0F91556588259
sub key tree isE5AE2D1D08645C141AF0F91556588259

FullPath is SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\E5AE2D1D08645C141AF0F91556588259
sub key tree isE5AE2D1D08645C141AF0F91556588259

FullPath is SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8F64C9BC1B7B89C4FACBF10C33A889BD
sub key tree is8F64C9BC1B7B89C4FACBF10C33A889BD

FullPath is SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CB9C46F8-B7B1-4C98-AFBC-1FC0338A98DB}

9. Delete the 'Symantec' folder from SharePoint's 15 hive folder using following steps:

•   Go to %programfiles%\Common Files\Microsoft Shared\Web Server Extensions\15\TEMPLATE\ADMIN
•   Delete the 'Symantec' folder from the location as shown in Screenshot # 8

Screenshot #8

Remove the SPSS links from SharePoint central admin page applicable to CA server (Application server) ONLY using the following steps:

i. Open the command prompt using the administrator privileges.
ii. Check whether SPSS_Link_Creator.exe is available at the location mentioned in step 3 ii, if it does not exists copy the same provided along with this document to this location.
iii. Execute the command 'SPSS_Link_Creator.exe RemoveLink <Arg1> <Arg2>' as shown in the Screenshot # 9.

Arguments:

<Arg1>:- "%programfiles%\Common Files\Microsoft Shared\Web Server Extensions\15" is the MOSS 2013 SharePoint BIN path.
<Arg2>:- "v2013" is the SharePoint version.

Screenshot # 9

Notice the entry "application link is removed successfully" in the Dbgview.exe window.

Remove the SPSS service using the below steps:

i. Execute the 'sc delete SymantecSharePointScan' command as shown in the Screenshot # 10.

Screenshot # 10

ii. Check whether the "Symantec Protection 6.0 for SharePoint Servers" service is uninstalled from services.msc.

Unregister the Real time scan component using the below steps:

i. Copy the regasm.exe and regasm.exe.config file provided along with this document according to the SPSS version at the ' <Install Dir>\Installer\' folder
ii. Execute the command 'regasm /codebase "<Install Dir>\SymantecScanLibrary.dll" /u'.

Removal of assemblies from Global Assembly Cache using the following steps:

   See reference section "Steps to open Global Assembly Cache [GAC]" to know the location of the Global Assembly Cache. Copy the gacutil.exe and gacutil.exe.config file provided along with this document to '<Install Dir>\Installer\' folder.

Execute the command 'gacutil /u '

Add the below assembly name one by one in the section of the command and execute it for all the assemblies mentioned below.

Symantec.Sharepoint.DataAccess.BO
Symantec.Sharepoint.Entities
Symantec.Sharepoint.LoggerClient
Symantec.Sharepoint.ReportingService
Symantec.Sharepoint.RTCommandClient
Symantec.Sharepoint.ScanService
Symantec.SharePoint.Service.DataAccess
Symantec.Sharepoint.Service.Logger
  Symantec.Sharepoint.Service.RTCommand
Symantec.Sharepoint.Shared.InterfaceLibrary
  Symantec.Sharepoint.SPSSCore
   Symantec.Sharepoint.SPSSCore.SPSVersion2013
Symantec.Sharepoint.Utility
  Symantec.SPSS.Adminconsole.Data
  Symantec.SPSS.Adminconsole.Entities
  Symantec.SPSS.AdminConsole
Symantec.SPSS.Adminconsole.SharePoint
Symantec.SPSS.Adminconsole.Utilities

Delete the "SharePoint" folder located at the "%programfiles%\Symantec" directory

Delete the "SharePointEngine" folder from the "%programfiles%\Common Files\Symantec Shared" folder
Delete the "Help_profile_2013" folder from the "%programfiles%\Common Files\Microsoft Shared\Web Server Extensions\15\TEMPLATE\LAYOUTS" folder
Delete the "SPSSAdminConsoleMain.en-US.resx" and SPSSAdminConsoleMain.resx from the "%programfiles%\Common Files\Microsoft Shared\Web Server Extensions\15\Resources" folder.
Delete the "Symantec.master" file from the "%programfiles%\Common Files\Microsoft Shared\Web Server Extensions\15\TEMPLATE\ADMIN" folder.
Start the "SharePoint Administration" service
Execute the 'iisreset /start' command to start the IIS.

References:

Steps to stop Service

Step 1) Go to Start -> Run and type services.msc as shown in the below screenshot

Step 2) Right click service window for Symantec Protection 6.0 for SharePoint Servers and select Stop option as shown in the below screenshot.

Steps to enable logging on DebugView

DebugView is a monitoring program that allows you to monitor debug output on your local computer. You can download DebugView from this Microsoft Web site. Symantec does not support or warranty this program. Symantec makes no guarantee or promise of suitability or compatibility of DebugView with your computer.

Download and install DebugView.
Open DebugView.
Click Options. Check Clock Time and Show Milliseconds.
Click File. Click Log to File.
In the Log File text box, type c:\dbgview.log
Click Limit Log Size.
In the Max Log Size (MB) text box, type the desired maximum size for your log file.
Click OK.
If the operating system is a 64 bit operating system click Capture. Check Capture Global Win32

Steps to check the SPSS installation location

Step 1) Go to Start -> Run and type services.msc as shown in the below screenshot

Step 2) Right click the properties in the service window for Symantec Protection 6.0 for SharePoint Servers as shown in the below screenshot

Step 3) Installation location is the highlighted path in the below screenshot

Verify SPSSEnabledServer entry in the SPSSObject table in the SharePoint Configuration database

Step 1) Verify the SPSSObjects table as shown in the below screenshot

Step 2) Execute the SQL query "SELECT * FROM [dbo].[SPSSObjects] where ObjectType = 'SPSSEnabledServer'
Step 3) Use the ServerName column to check whether the SPSSEnabledServer entry for the server where we have executed the command has been removed

Web.config location

Step 1) Go to Start -> Run and type inetmgr.
Step 2) Right click on the Central Administration site and select "Manage Web Site" -> "Advanced Settings…" option as shown in the below screenshot.

Step 3) The "Advanced Settings" window opens up, and the "physical path" lists the web.config file location, as shown in the below screenshot

Steps to take back up of registry

Step 1) Go to Start -> Run and type regedit as described in below screenshot

Step 2) Click "Export" from "File" menu as shown in below screenshot.

Step 3) Export the file with appropriate name and save it on disc. Select "All" under the Export Range before saving it to disc as shown in the below screenshot

Steps to open Global Assembly Cache [GAC]

Step 1) Go to Start -> Run and type assembly as shown in the below screenshot

Step 2) This will open a new window as show in the below screenshot

Attachments

SP 2013.zip get_app

6.0.5 - Manual UnInstall_SP 2013.docx get_app