While trying to uninstall SEP client with PowerShell uninstallation command (Get-WmiObject -Class Win32_Product -Filter "Name='Symantec Endpoint Protection'" -ComputerName . ).Uninstall() uninstallation fails and rollback is automatically triggered. In the command output you can see ReturnValue : 1603.
In the MSI uninstallation log you can find the following entries:
MSI (s) (B0:10) [10:12:06:488]: Invoking remote custom action. DLL: C:\Windows\Installer\MSI920F.tmp, Entrypoint: StopSaepServices
DEBUG StopSaepServices begin.
INFO Running in install mode
INFO Service heCAF is stopping, waiting...
ERROR WaitForSingleObject: timeout. Error code: 1460: This operation returned because the timeout period expired.
DEBUG StopSaepServices end, return value: 1603.
CustomAction StopSaepServices returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
The heCAF service is busy retrying, it cannot respond to any service stop requests. As a result, the SEP uninstallation times out after 30 seconds.
This is fixed in SEP 14.3 RU2.
SEP 14.3 MP1
Upgrade to SEP 14.3-RU2 to get the fix for an error in CAF service.
Alternatively, change the heCAF start type to 4 (Disabled), and reboot the computer. After reboot, confirm that the heCAF service is stopped. Then, try to uninstall SEP client again.
Path for the required registries to edit: