


# On Windows 10, an unstall of SEP may leave behind keys that inhibit Windows Defender from running.

Netsh advfirewall set allprofiles state on 2>&1 | Out-Host Write-Output "- Making sure Windows firewall is re-enabled." # After uninstalling SEP, the Windows firewall may be disabled $regpath = "HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\$guid" Start-Process msiexec -ArgumentList /x, "$guid", /qn, /norestart, /log, "$logfile" -Wait # Call msiexec with -Wait so we do not continue until it is installed. Write-Output "- Found under $regpath, uninstalling, see $logfile for results." $regpath = "HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\$guid" Write-Output "- Checking for SEP install $guid." $logfile = Join-Path $LocalGPOFiles "Logs\msiexec-sep-uninstall.log" Write-Output "- $($MyInvocation.M圜ommand)." function Uninstall-SymantecEndpointProtection Note that this snippet of code is part of a larger script, so it uses some functions and global variables you will not have, but you should be able to use the basic concepts. This is pulled from our Computer Startup scripts. Here is the PowerShell function I wrote to do it prior to deploying Webroot. Holy crap are you me from six months ago?
