Skip to main content

Hi all



We are going to upgrade our users from from ElCapitan to High Sierra. As part of this we will need to uninstall SEP, and then install SCEP, preferably using a single policy/script.



I am new to this so and advice/suggestions would be greatly appreciated. Has anyone already done a script for this?



Many thanks
Struan

Content backfill required

Many thanks, I give that a go.
Cheers


Hi
I tried this, but it just seemed to get stuck saying executing.
I don't know enough about scripting to know what might be going wrong. Is there a slimmed down version that might be less thorough, but more stable.
Many thanks


Sorry should have marked this as resolved a while ago.



ref: https://www.jamf.com/jamf-nation/discussions/9271/uninstalling-symantec-endpoint-anti-virus



Used a modified version of the above script to remove SEP, found here: https://gist.github.com/rderewianko/6aa0032f19e57b595e0fdae4470f6286



Then ran a second policy to install SCEP, which was just the .pkg (taken from the SCEP installer .dmg and renamed)


Via sel service I use the SEP uninstaller that symantec provides. It uninstalls 14.0.1. But after a restart self service does not connect to server so i cant install the new version


Hi @tcandela
Maybe what you can do, is set up a policy to install the new version, but also within that same policy have the script to uninstall and set it to run first, by setting the priority to Before.


Please read this post for important information regarding SCEP for macOS.



https://techcommunity.microsoft.com/t5/Configuration-Manager-Blog/End-of-Support-for-SCEP-for-Mac-and-SCEP-for-Linux-on-December/ba-p/286257


if just uninstalling SEP, wouldn't this work?



#!/bin/sh
RemoveSymantecMacFiles -A -r

@Bhughes I could find the updated version of RemoveSymantecMacFiles.command but cannot make it work with a script calling it like you're suggesting. I can only run it manually and can only choose the options it give me within the terminal
Where is the "SymantecRemovalTool" this tech note refers to which is supposed to work without interaction?
Am I missing sometheing obvious?
How can use RemoveSymantecMacFiles.command from a policy to automatically uninstall SEP?
Many thanks for you help and stay all safe!
Ciao,
Carlo


@carlo.anselmi If you haven't already found it, there is a link to the SymantecRemovalTool immediately following the step-by-step instructions for downloading and installing RemoveSymantecMacFiles in the tech note you linked to in your post. Just scroll down a bit and you will will see it. Thank you for posting this because I stumbled upon a slightly earlier version of this tech note and the link had been removed from it.


@carlo.anselmi To run without interaction, you need to change something in the latest version (8.0.2) of the script. By default it says false, it should be true:



AutoRunScript=true

Excellent thread. Very nice of you to share @txhaflaire


@hlans
@mheffernan



Many thanks! Solved it!
Ciao


Very old thread, but is there an update to this script? I would love to have it in Jamf, I have a few hundred machines I have to remove SEP on. The script that Symantec supplies works fine as a one off with interaction...but that doesn't work with many.