Unable to uninstall Symantec Endpoint Protection (SEP) client or the teefer firewall component without rollback and error.
This is not a SEP issue. Suggestion is to reach out to Microsoft to see if they have a fix or if this is a known issue. The Teefer uninstall is handled by Windows OS using INetCfgClassSetup windows interface to uninstall the teefer driver. SEP only calls this interface and the rest of the install or uninstall is carried out by Windows. Broadcom Symantec have no control over the operation once invoked. The procmon logs an exception during the operation with the MS dll file.
NetSetupApi.dll wil::StoredFailureInfo::SetFailureInfo 0x7fffeee397d4 C:\Windows\System32\NetSetupApi.dll 11 NetSetupApi.dll wil::ResultException::ResultException + 0xb7 0x7fffeee3af13 C:\Windows\System32\NetSetupApi.dll 12 NetSetupApi.dll HResultException::HResultException + 0x12 0x7fffeee3ae02 C:\Windows\System32\NetSetupApi.dll 13 NetSetupApi.dll <lambda_09868e96808a4ba772f5abc0828c32ac>::operator() + 0x68 0x7fffeee3b050 C:\Windows\System32\NetSetupApi.dll 14 NetSetupApi.dll NetSetupExecuteInRpc<<lambda_09868e96808a4ba772f5abc0828c32ac> > + 0x18 0x7fffeee3a96c C:\Windows\System32\NetSetupApi.dll 15 NetSetupApi.dll NetSetupExecuteInFrame<<lambda_77fae137340ecf4d416294e53d0e1029> > + 0x22 0x7fffeee3c02a C:\Windows\System32\NetSetupApi.dll 16 NetSetupApi.dll NetSetupCommit + 0x27 0x7fffeee3ead7 C:\Windows\System32\NetSetupApi.dll 17 NetSetupShim.dll NetSetup2::details::TransactionBase::Commit + 0x10 0x7fffeed9dbc8 C:\Windows\System32\NetSetupShim.dll 18 NetSetupShim.dll <lambda_b7c3c4e804a1e0d9d3faf5cee11cfebe>::operator() + 0x308 0x7fffeed6a63c C:\Windows\System32\NetSetupShim.dll 19 NetSetupShim.dll NetSetupExecuteInFrameReturnHResult<<lambda_b7c3c4e804a1e0d9d3faf5cee11cfebe> > + 0x12 0x7fffeed694ba C:\Windows\System32\NetSetupShim.dll 20 NetSetupShim.dll NetCfgClass::DeInstall + 0x68 0x7fffeed77288 C:\Windows\System32\NetSetupShim.dll
>>> [SetupUninstallOEMInf - oem52.inf]
>>> Section start 2020/09/08 11:27:37.754 cmd: "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.1031.0100.105\Bin64\installTeefer.exe" -u -l 2 -s "C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.2.1031.0100.105\Bin64\TeeferWin8" inf: Flags: 0x00000001 inf: Driver Store Path: C:\WINDOWS\System32\DriverStore\FileRepository\teefer.inf_amd64_ae9ada4ffc411b6a\teefer.inf sto: \{Setup Delete Driver Package: C:\WINDOWS\System32\DriverStore\FileRepository\teefer.inf_amd64_ae9ada4ffc411b6a\teefer.inf} 11:27:38.001 pol: \{Driver package policy check} 11:27:42.285 pol: \{Driver package policy check - exit(0x00000000)} 11:27:42.305 sto: \{Unstage Driver Package: C:\WINDOWS\System32\DriverStore\FileRepository\teefer.inf_amd64_ae9ada4ffc411b6a\teefer.inf} 11:27:42.331 sto: \{DRIVERSTORE DELETE BEGIN} 11:27:42.343 sto: \{DRIVERSTORE DELETE BEGIN: exit(0x00000000)} 11:27:42.418 idb: \{Unpublish Driver Package: C:\WINDOWS\System32\DriverStore\FileRepository\teefer.inf_amd64_ae9ada4ffc411b6a\teefer.inf} 11:27:42.459 idb: Clearing active driver package 'teefer.inf_amd64_ae9ada4ffc411b6a'. cpy: Unpublished 'oem52.inf'. idb: Deindexed 2 device IDs for 'teefer.inf_amd64_ae9ada4ffc411b6a'. sto: Flushed driver database node 'DRIVERS'. Time = 16 ms sto: Flushed driver database node 'SYSTEM'. Time = 47 ms idb: \{Unpublish Driver Package: exit(0x00000000)} 11:27:42.602 idb: \{Unregister Driver Package: C:\WINDOWS\System32\DriverStore\FileRepository\teefer.inf_amd64_ae9ada4ffc411b6a\teefer.inf} 11:27:42.653 idb: Unregistered driver package 'teefer.inf_amd64_ae9ada4ffc411b6a' from 'oem52.inf'. idb: Deleted driver package object 'teefer.inf_amd64_ae9ada4ffc411b6a' from DRIVERS database node. idb: Deleted driver INF file object 'oem52.inf' from DRIVERS database node. idb: \{Unregister Driver Package: exit(0x00000000)} 11:27:42.662 cpy: \{Delete Directory: C:\WINDOWS\System32\DriverStore\FileRepository\teefer.inf_amd64_ae9ada4ffc411b6a} 11:27:42.664 cpy: \{Delete Directory: exit(0x00000000)} 11:27:42.675 sto: \{DRIVERSTORE DELETE END} 11:27:42.677 sig: Uninstalled catalog 'oem52.cat'. sto: \{DRIVERSTORE DELETE END: exit(0x00000000)} 11:27:43.671 sto: \{Unstage Driver Package: exit(0x00000000)} 11:27:43.672 sto: \{Setup Delete Driver Package - exit (0x00000000)} 11:27:45.095 <<< Section end 2020/09/08 11:27:45.155 <<< [Exit status: SUCCESS] >>> [Delete Device - SWD\PRINTENUM\\{36DB47EC-66B5-4F91-BD75-23DABD6C6942}] >>> Section start 2020/09/08 11:27:43.465 cmd: C:\WINDOWS\System32\spoolsv.exe <<< Section end 2020/09/08 11:27:43.555 <<< [Exit status: SUCCESS] >>> [Delete Device - SWD\PRINTENUM\\{9B857F5A-0162-4C2A-BF54-58D44CF4E581}] >>> Section start 2020/09/08 11:27:44.659 cmd: C:\WINDOWS\System32\spoolsv.exe ! dvi: Access denied from Query and Remove <<< Section end 2020/09/08 11:27:44.759 <<< [Exit status: SUCCESS] >>> [Delete Device - SWD\PRINTENUM\\{1EAF4118-D3FB-436A-9B5F-CE5B5A08E395}] >>> Section start 2020/09/08 11:27:48.856 cmd: C:\WINDOWS\System32\spoolsv.exe <<< Section end 2020/09/08 11:27:49.024 <<< [Exit status: SUCCESS] >>> [Delete Device - SWD\PRINTENUM\\{7076CB55-6E71-4F6D-866F-5B9962E8F055}] >>> Section start 2020/09/08 11:27:52.569 cmd: C:\WINDOWS\System32\spoolsv.exe <<< Section end 2020/09/08 11:27:52.691 <<< [Exit status: SUCCESS] >>> [Delete Device - SWD\PRINTENUM\\{E4239149-9816-414D-8CE0-F08E6BEE9695}] >>> Section start 2020/09/08 11:27:53.585 cmd: C:\WINDOWS\System32\spoolsv.exe ! dvi: Access denied from Query and Remove <<< Section end 2020/09/08 11:27:53.796 <<< [Exit status: SUCCESS] >>> [Delete Device - SWD\PRINTENUM\\{8BB0CB93-5514-4E37-A147-039C2B7DEE2D}] >>> Section start 2020/09/08 11:27:54.420 cmd: C:\WINDOWS\System32\spoolsv.exe <<< Section end 2020/09/08 11:27:54.650 <<< [Exit status: SUCCESS] >>> [Delete Device - SWD\PRINTENUM\\{C982411D-1E6F-4AD6-99E1-9F1263881A0C}] >>> Section start 2020/09/08 11:27:59.056 cmd: C:\WINDOWS\System32\spoolsv.exe <<< Section end 2020/09/08 11:27:59.180 <<< [Exit status: SUCCESS] >>> [Delete Device - SWD\PRINTENUM\\{691AF9B7-2B21-4036-AAC9-14B118606C29}] >>> Section start 2020/09/08 11:27:59.726 cmd: C:\WINDOWS\System32\spoolsv.exe ! dvi: Access denied from Query and Remove <<< Section end 2020/09/08 11:27:59.803 <<< [Exit status: SUCCESS] >>> [Delete Device - SWD\PRINTENUM\\{52C3DE85-B3EA-4FC2-A25F-B82C45970EFB}] >>> Section start 2020/09/08 11:28:00.055 cmd: C:\WINDOWS\System32\spoolsv.exe ! dvi: Access denied from Query and Remove <<< Section end 2020/09/08 11:28:00.276 <<< [Exit status: SUCCESS] >>> [Delete Device - SWD\PRINTENUM\\{48541172-4228-4DFA-A1BF-12D1AACC970B}] >>> Section start 2020/09/08 11:28:00.586 cmd: C:\WINDOWS\System32\spoolsv.exe ! dvi: Access denied from Query and Remove <<< Section end 2020/09/08 11:28:00.683 <<< [Exit status: SUCCESS]