How to remove Symantec Email Submission Client (SESC) manually


Article ID: 180977


Updated On:


Mail Security for Microsoft Exchange Messaging Gateway




This article provides steps on how to remove SESC manually. 

Please note the following:

  • It is recommended that SESC is removed using Add/Remove programs.

WARNING: In the next steps you will edit the Windows registry. Back up the registry before you make any changes to it, because incorrect changes to the registry can result in permanent data loss or corrupted files. Modify only the registry keys that are specified.

The following document explains how to back up the registry: How to back up, edit, and restore the registry in Windows 7 and Windows Server 2008

Perform the following steps:

1. If possible, remove SESC-created folders from Exchange before removing SESC.  See the following article for details: How to remove email folders created in Microsoft Exchange by Symantec Email Submission Client (SESC).

2. Stop and remove the service:

Open a command prompt and enter the following commands:

net stop sesc
sc delete sesc

3. Remove web site.

a. Open Start|Administrative Tools|Internet Information Services (IIS) Manager.
b. On the right hand side menu expand Server Name > Sites.
c. Right click Symantec Email Submission Client and select Remove.
d. On the right hand side menu click Server Name > Application Pools.
e. Right click on SESCAppPool and select Remove.
f. Open a command prompt and enter the following commands:


 4. Remove registry keys.

a. Exit all programs.
b. Open regedit and remove the following keys if they are present:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\eventlog\Application\Symantec Email Submission Client

5. If the SESC console was not used to remove SESC-created folders from Exchange, then remove them manually using the following article: How to remove email folders created in Microsoft Exchange by Symantec Email Submission Client (SESC).

6.    Remove Folders:

C:\Program Files\Symantec\SESC

NOTE: These paths are the default locations; adjust the paths if you installed the program into a different location.

7. Delete Symantec Email Client Console icon from desktop.

8. Delete Start Menu item Symantec Corporation|Symantec Email Submission Client.

9. Remove Exchange application impersonation.

WARNING: Do not remove the rights given to this account if the account is used by other SESC computers or the account is used for other Exchange applications/services.

Exchange 2010

Remove-ManagementRoleAssignment –Name SESCApplicationImpersonationRole –Role ApplicationImpersonation -User <sescServiceAccountName>

NOTE:  Replace <sescServiceAccountName> with the name of the SESC service account.  The following example removes impersonation for the account 2k8domain\administrator:

Remove-ManagementRoleAssignment –Name SESCApplicationImpersonationRole –Role ApplicationImpersonation -User 2k8domain\administrator

Exchange 2007

Get-ExchangeServer | where {$_.IsClientAccessServer -eq $TRUE} | ForEach-Object {Remove-ADPermission -Identity $_.distinguishedname -User (Get-User -Identity <sescServiceAccountName> | select-object).identity -extendedRight ms-Exch-EPI-Impersonation}

NOTE:  Replace <sescServiceAccountName> with the name of the SESC service account.  The following example removes impersonation for the account 2k8domain\administrator:

Get-ExchangeServer | where {$_.IsClientAccessServer -eq $TRUE} | ForEach-Object {Remove-ADPermission -Identity $_.distinguishedname -User (Get-User -Identity 2k8domain\administrator | select-object).identity -extendedRight ms-Exch-EPI-Impersonation}

10. Remove SESC service account machine log on permissions.

a. Click Start > Administrative Tools > Local Security Policy.
b. In the left pane, expand Local Policies and click User Rights Assignment.
c. In the right pane, double-click Log on as a service.
d. On the Local Security Setting tab, click the correct user name.
e. Click the Remove button.
f. Click OK.

11. Remove SESC Admins domain group.

NOTE:  If there are other computers running SESC do not perform this step.

When SESC is un-installed the “SESC Admins” global security group created under “Users” container in Active Directory is not removed.

Open “Active Directory Users and Computer” span in on Domain Controller, select “Users” container in the left pane, in the right pane right click on “SESC Admins” and click on “Delete”, then click on “Yes” for confirmation.


  • SESC 1.X