From 337d82a810c66f4226a7f246692bc51d499b1201 Mon Sep 17 00:00:00 2001 From: Denise Vangel-MSFT Date: Thu, 18 Jun 2020 10:39:35 -0700 Subject: [PATCH] Update symantec-to-microsoft-defender-atp-onboard.md --- ...antec-to-microsoft-defender-atp-onboard.md | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md index eb9d21263b..76460c4388 100644 --- a/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md +++ b/windows/security/threat-protection/microsoft-defender-atp/symantec-to-microsoft-defender-atp-onboard.md @@ -83,6 +83,27 @@ stuff (will draw from existing content here) ## Uninstall Symantec +*WORK IN PROGRESS* + +Uninstall 3rd party EDR (RSA NetWitness) + +Uninstall 3rd party SEP AV +1) Unblock password (Anti-tamper, in order to remove) +2) Refresh SEP policy + +3) Uninstall the Endpoint Protection client using the command prompt +https://support.symantec.com/us/en/article.tech102470.html + +There is an example for both PowerShell and DOS. This script could be automated to check for a ReturnValue to equal zero and if not then run “CleanWipe” + +Download the CleanWipe removal tool to uninstall Endpoint Protection +https://support.symantec.com/us/en/article.howto124983.html +Note: SEP 14 now forces end-user interaction. + +Article has the download and readme. + +Select all apps in the tool and once completed it will require a reboot and once you log back in the software will continue and show completion. You will need to periodically check this article as they update the software versions often. You can also verify when running if it requires an update. + [Uninstall Symantec Endpoint Protection](https://knowledge.broadcom.com/external/article/156148/uninstall-symantec-endpoint-protection.html)