Feb
18
2010

How to manually remove ePO 4.0

Summary

ePolicy Orchestrator (ePO) 4.0 setup is based on the Microsoft Windows Installer technology. When you attempt to install ePO 4.0, any failure during setup will cause the installer to roll back the changes. In some rare instances, the rollback might not occur successfully and your ePO installation may be left in an incomplete state. This can also happen when a Patch installation has failed.
In such scenarios, you may want to reinstall ePO and restore the ePO 4.0 database.
The following are manual removal instructions for ePO 4.0 if you are unable to remove ePO using the Windows Add or Remove Programs feature.

Problem

ePO 4.0 uninstallation fails from Add or Remove Programs.

Solution

These steps require the Microsoft MSIZap utility. This may already be present on the server from previous MSI-based installations, but if not it is part of the Microsoft Windows Install Clean Up Utility.
After installation of the Windows Install Clean Up Utility, MSIZap will be found in the following folder: c:Program FilesMSECACHEWICU3Ansi

CAUTION: This article contains information about opening or modifying the registry.

  • The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
  • Before proceeding, McAfee strongly recommends backing up your registry and understanding the restore process. For more information, see:http://support.microsoft.com/kb/256986
  • Do not run a .REG file that is not confirmed to be a genuine registry import file.
  1. Click Start, Settings, Control Panel, Add or Remove Programs.
  2. Uninstall all other McAfee products from the computer, leaving only ePO.
    NOTE: McAfee Agent 4.0 is also listed in Add or Remove Programs where earlier versions, such as Common Management Agent 3.6, are not. For assistance with manually uninstalling the McAfee Agent, see:  KB55208. However, the following command can be run to completely remove an agent and all of its components:  frminst.exe /forceuninstall
  3. Stop any existing ePO services. The safest way to complete this is to mark the services as Disabled and restart the server:
    1. Click Start, Run, type services.msc and click OK.
    2. Double-click each of the services below, select Disabled for the Startup type, and click OKto apply the changes:
      – McAfee ePolicy Orchestrator 4.0.0 Application Server
      – McAfee ePolicy Orchestrator 4.0.0 Event Parser
      – McAfee ePolicy Orchestrator 4.0.0 Server
  4. Restart the server.
  5. Remove ePO 4.0 entries from the registry: 
    1. Click Start, Run, type regedit and click OK.
    2. Navigate to and Delete all of the following registry keys:
      [HKEY_LOCAL_MACHINESOFTWAREMcAfee]
      [HKEY_LOCAL_MACHINESOFTWARENetwork Associates]
      [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{66C69D80-C95C-11d3-8A0B-006008C7D0F2}]
      [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall{AF05AA5C-1B53-45DE-9FFD-8F37F329A4BC}]
      [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesMCAFEEAPACHESRV]
      [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesMCAFEEEVENTPARSERSRV]
      [HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesMCAFEETOMCATSRV]
  6. Delete the ePO installation folder.
    The default location is:  C:Program FilesMcAfeeePolicy Orchestrator 
  7. Use the Microsoft Windows Install Clean Up Utility to remove the MSI components:
    1. Obtain the Microsoft Windows Install Clean Up Utility from: http://support.microsoft.com/kb/290301
    2. Double-click msicuu2.exe to install this utility.
    3. Click Start, Programs, Windows Install Clean Up.
    4. Using the Microsoft Windows Install Clean Up Utility, click only the entry for McAfee ePolicy Orchestrator (4.0.0) and select Remove.
      NOTE: If the Microsoft Windows Install Clean Up Utility does not list McAfee ePolicy Orchestrator (4.0.0), use the MSIZap application that is a part of the utility as follows:
      1. Click Start, Run, type cmd and click OK.
      2. Run each of the commands below:
        MSIZAP TW! {66C69D80-C95C-11d3-8A0B-006008C7D0F2}
        MSIZAP TW! {AF05AA5C-1B53-45DE-9FFD-8F37F329A4BC}
  8. Delete the following folder, if present:  %windir%Installer{AF05AA5C-1B53-45DE-9FFD-8F37F329A4BC}
  9. Restart the server.

This process does not remove any instances of SQL that are present on the server or any ePO databases that may be attached to an SQL instance. Do the following to remove these: 
Determine the ePO database name:

  1. Click Start, Run, type explorer and click OK.
  2. Navigate to:  c:Program filesMcAfeeePolicy OrchestratorServerConfOriondb.properties
  3. Right-click the db.properties file and open in Notepad.
    db.database.name indicates the ePO database.
    db.server.name indicates the SQL server name.
    The ePO 4.0 database is typically named EPO4_.
    NOTE: For a named instance, the db.instance.name value is populated. For a default instance,db.instance.name is blank.

Using this information, the ePO database can be safely dropped using tools such as SQL Server Management Studio or SQL Server Enterprise Manager by connecting to the correct SQL Server instance. For instructions on how to drop (delete) the database, refer to SQL Server Books online.
If SQL 2005 was only installed for use with ePO and is no longer required, it can be safely removed after restarting the server in Step 9 above using Add or Remove Programs.
Originally Located here

About the Author:

Comments are closed.