How to repair a Symantec Endpoint Protection (SEP) client installation using a script
search cancel

How to repair a Symantec Endpoint Protection (SEP) client installation using a script

book

Article ID: 152811

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

A repair of the SEP client through Control Panel - Add and Remove resolves an issue with the SEP client.

You want to know how to use a script to resolve the same issue on multiple systems within the network.

Resolution

SEP is installed and uninstalled using Microsoft Windows's MSIEXEC utility.  MSIEXEC can use command line parameters to accomplish a Install, Repair or Uninstall.
The basic format for a MSIEXEC command line repair is:
MSIEXEC /f [p] {Package/product code}
 
Using the basic format for a MSIEXEC command line repair of SEP is:
MSIEXEC /fp SEP_Setup.MSI
 
NOTE:
1) The file "SEP_Setup.MSI" must be on the system under repair.
2) The "f" and "p" switches/flags are listed here an an example only.  See the following documents to get the desired results:
a. Command-Line Switches for the Microsoft Windows Installer Tool
http://support.microsoft.com/kb/227091
b. http://www.symantec.com/connect/forums/how-run-repair-sep-11-command-line-xp-and-vista-form-client-side

To locate where the SEP MSI package is at and by what system GUID the package is called, look in the registry.

HKEY_Local_Machine\Software\Microsoft\Windows\CurrentVersion\Uninstall\

 
Microsoft assigns each MSIEXEC installed product a system GUID in the registry to allow ease of reference after install.  The above registry entry details the SEP install.
 
While the above detailed registry key/GUID is typical for Windows, it is critical to verify the correct key/GUID used for each system affected.
 
Once the correct key/GUID is determined, the registry value "UninstallString" will detail the correct path to use when using MSIEXEC to make any changes to SEP.
In the above example:
MsiExec.exe /I{49EC6764-44D0-4C00-BE09-C54203E3747A}
 
To effect a repair on the current SEP client install, replace the I flag with the F flag and insert a space before the assigned GUID.
See the command line example below:
MsiExec.exe /F {49EC6764-44D0-4C00-BE09-C54203E3747A}
 
This command will have to be accomplished from the folder where the associated SEP install package .MSI file is located. Typically the Symantec Endpoint Protection folder.
Please see the example below:
C:\Program Files\Symantec\Symantec Endpoint Protection>MsiExec.exe /F {49EC6764-44D0-4C00-BE09-C54203E3747A}

 This is the equivalent of Control Panel > Add Remove > Repair


Applies To

SEP in a Windows OS is installed, repaired and uninstalled by Microsoft utility MSIEXEC.

See the following Microsoft documentation on details about MSIEXEC:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/msiexec.mspx?mfr=true