How to manually remove ePolicy Orchestrator 5.x
Technical Articles ID:
KB79479
Last Modified: 2023-07-13 08:57:39 Etc/GMT
Last Modified: 2023-07-13 08:57:39 Etc/GMT
Environment
ePolicy Orchestrator (ePO) 5.x
Supported Microsoft Windows Servers
For details of ePO-supported environments, see KB51569 - Supported platforms for ePolicy Orchestrator.
Supported Microsoft Windows Servers
For details of ePO-supported environments, see KB51569 - Supported platforms for ePolicy Orchestrator.
Summary
If you're unable to uninstall ePO 5.x using Programs and Features in Windows Servers, manually uninstall ePO 5.x:
IMPORTANT:
HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Apache Software Foundation\Procrun 2.0\MCAFEETOMCATSRV###
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator
IMPORTANT: Don't delete the Agent or Application plug-ins subkeys if they exist and there are other products installed on the computer.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E2C3579A-6B3B-40F6-88E8-BE08E78C8D1A}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E2C3579A-6B3B-40F6-88E8-BE08E78C8D1A}_ePO
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{66C69D80-C95C-11d3-8A0B-006008C7D0F2}
IMPORTANT:
- Use the default software uninstall in Program And Features on Windows Servers before you try to manually uninstall Trellix products.
- Before you begin, back up the folder paths as described in KB66616 - ePolicy Orchestrator server backup and disaster recovery procedure. If you intend to reinstall the ePO server, these files are needed to ensure a successful reinstall for your current environment.
The following procedure is provided in case the original MSI files are missing or have become corrupted.
CAUTION: This article contains information about opening or modifying the registry.
NOTES:
CAUTION: This article contains information about opening or modifying the registry.
- The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
- Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see the Microsoft Windows registry information for advanced users article.
- Do not run a REG file that is not confirmed to be a genuine registry import file.
NOTES:
- Temporarily disable VirusScan Access Protection during this procedure.
- Steps might require removal of data corresponding to the McAfee ePolicy Orchestrator Application Server service, similar to the following:
MCAFEETOMCATSRV###
Here, ### is the major build version.
Examples:- 590 for 5.9.x versions
- 530 for 5.3.x versions
- 510 for 5.1.x versions
- 500 for 5.0.x versions
- Remove ePO services:
- Click Start, Run, type
cmd , and then click OK. - Run the following:
net stop MCAFEEAPACHESRV net stop MCAFEEEVENTPARSERSRV net stop MCAFEETOMCATSRV###
sc delete MCAFEEAPACHESRV sc delete MCAFEEEVENTPARSERSRV sc delete MCAFEETOMCATSRV###
- If any of the following registry keys remain after you run the commands in the previous step, restart the system and delete the remaining registry keys:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MCAFEEAPACHESRV HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MCAFEEEVENTPARSERSRV HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\MCAFEETOMCATSRV###
- Click Start, Run, type
- Unregister ePO COM objects using one of the following methods:
- Option 1:
If the ePO installation folder hasn't been deleted, open a command prompt as Administrator, change to the ePO installation folder, and run the following:%windir%\SysWOW64\regsvr32 /u DalPolicy.Dll %windir%\SysWOW64\regsvr32 /u NaePOBll.Dll %windir%\SysWOW64\regsvr32 /u NaePODal.Dll regsvr32 /u sitemanager64.dll regsvr32 /u sitemgrwrap64.dll
- Option 2:
Delete the following registry keys:
HKEY_CLASSES_ROOT\AppID\{11D6CF01-F8BA-4e8f-8BC4-9A2B63908AA1}
HKEY_CLASSES_ROOT\AppID\{2325BAFD-B595-4E1E-95A2-BE043AB18251}
HKEY_CLASSES_ROOT\AppID\{726B5B0E-51FC-41FB-A07E-61069B5D02DC}
HKEY_CLASSES_ROOT\AppID\dalpolicy.dll
HKEY_CLASSES_ROOT\AppID\SiteMgrWrap.DLL
HKEY_CLASSES_ROOT\CLSID\{0C0E6B96-D948-4611-85F1-BE9BFCAD7B79}
HKEY_CLASSES_ROOT\CLSID\{4124FDF6-B540-44C5-96B4-A380CEE9826A}
HKEY_CLASSES_ROOT\dalpolicy.DALPolicyDBManager
HKEY_CLASSES_ROOT\dalpolicy.DALPolicyDBManager.1
HKEY_CLASSES_ROOT\Interface\{00000500-0000-0010-8000-00AA006D2EA4}
HKEY_CLASSES_ROOT\Interface\{3BF43203-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43204-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43205-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43206-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43207-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43208-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43209-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF4320A-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF4320B-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF4320C-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF4320D-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF4320F-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43220-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43230-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43240-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43250-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43260-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43300-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{3BF43302-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Interface\{50D3338A-D8A5-4604-93C0-46DF5B7F2B3C}
HKEY_CLASSES_ROOT\Interface\{715E29C2-FA71-4CE1-BBBE-4DF424B3ACE0}
HKEY_CLASSES_ROOT\Interface\{7A73AA39-AEF9-4D34-BAB7-CC27CE57990D}
HKEY_CLASSES_ROOT\Interface\{94FE23C5-AA62-45C7-93AC-A60031BA3DAC}
HKEY_CLASSES_ROOT\Interface\{B45B28E8-224A-4E3F-895F-3ACD9A341125}
HKEY_CLASSES_ROOT\Interface\{D22218A8-1FCE-4DF6-BDB8-B17E97073283}
HKEY_CLASSES_ROOT\Interface\{E9B6594C-31C7-4A83-86B6-10E32B159014}
HKEY_CLASSES_ROOT\Naepobll.EPOBLL
HKEY_CLASSES_ROOT\Naepobll.EPOBLL.1
HKEY_CLASSES_ROOT\Naepodal.EPODAL
HKEY_CLASSES_ROOT\Naepodal.EPODAL.1
HKEY_CLASSES_ROOT\SiteManager.SiteMgr
HKEY_CLASSES_ROOT\SiteManager.SiteMgr.1
HKEY_CLASSES_ROOT\SiteMgrWrap.SiteMgrSynchronous
HKEY_CLASSES_ROOT\SiteMgrWrap.SiteMgrSynchronous.1
HKEY_CLASSES_ROOT\TypeLib\{11D6CF00-F8BA-4E8F-8BC4-9A2B63908AA1}
HKEY_CLASSES_ROOT\TypeLib\{7C1DB70B-B15A-4921-8E76-6E2A2AE3B444}
HKEY_CLASSES_ROOT\TypeLib\{9120937C-4406-4E34-A571-1B41EA0E0C6A}
HKEY_CLASSES_ROOT\TypeLib\{E34B8E8B-D8BD-4A2B-B3A8-49F005C86160}
HKEY_CLASSES_ROOT\TypeLib\{F82F7066-5F44-403E-BDE6-14D5E133A9EC}
HKEY_CLASSES_ROOT\Wow6432Node\AppID\{11D6CF01-F8BA-4e8f-8BC4-9A2B63908AA1}
HKEY_CLASSES_ROOT\Wow6432Node\AppID\{2325BAFD-B595-4E1E-95A2-BE043AB18251}
HKEY_CLASSES_ROOT\Wow6432Node\AppID\{726B5B0E-51FC-41FB-A07E-61069B5D02DC}
HKEY_CLASSES_ROOT\Wow6432Node\AppID\dalpolicy.dll
HKEY_CLASSES_ROOT\Wow6432Node\AppID\SiteMgrWrap.DLL
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11D6CF01-F8BA-4e8f-8BC4-9A2B63908AA1}
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{3BF43200-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{43119FFB-6CC4-491C-8EB5-A7F3F24114CB}
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{47AEF5E3-A0E7-46AC-A170-99ED58598997}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{00000500-0000-0010-8000-00AA006D2EA4}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43200-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43203-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43204-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43205-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43206-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43207-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43208-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43209-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF4320A-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF4320B-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF4320C-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF4320D-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF4320F-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43220-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43230-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43240-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43250-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43260-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43300-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{3BF43302-BA9B-4730-8172-760C23ACA789}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{50D3338A-D8A5-4604-93C0-46DF5B7F2B3C}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{715E29C2-FA71-4CE1-BBBE-4DF424B3ACE0}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{7A73AA39-AEF9-4D34-BAB7-CC27CE57990D}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{94FE23C5-AA62-45C7-93AC-A60031BA3DAC}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{B45B28E8-224A-4E3F-895F-3ACD9A341125}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{D22218A8-1FCE-4DF6-BDB8-B17E97073283}
HKEY_CLASSES_ROOT\Wow6432Node\Interface\{E9B6594C-31C7-4A83-86B6-10E32B159014}
HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{11D6CF00-F8BA-4E8F-8BC4-9A2B63908AA1}
HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{7C1DB70B-B15A-4921-8E76-6E2A2AE3B444}
HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{9120937C-4406-4E34-A571-1B41EA0E0C6A}
HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{E34B8E8B-D8BD-4A2B-B3A8-49F005C86160}
HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{F82F7066-5F44-403E-BDE6-14D5E133A9EC}
- Option 1:
- Remove the ePO MSI data using one of the following methods:
- Option 1:
Run the Microsoft Program Install and Uninstall troubleshooter, which is available in this Microsoft document.
Follow the troubleshooter's instructions, and select ePolicy Orchestrator when presented with the list of detected programs.
- Option 2:
Obtain themsizap.exe utility from the Microsoft Windows SDK. Open a command prompt as Administrator and change to the directory that containsmsizap.exe .
Run the appropriate following command for your ePO version:
- Option 1:
ePO 5.10.x:
msizap TW! {E2C3579A-6B3B-40F6-88E8-BE08E78C8D1A}
ePO 5.9.x:
msizap TW! {6DAACE3A-D62A-43B7-AD10-463FE542DF10}
ePO 5.3.x:
msizap TW! {53B73DFD-AFBE-4715-88A1-777FE404B6AF}
ePO 5.1.x:
msizap TW! {806ACE6E-C694-43FE-A470-160A332D7AF9}
ePO 5.0.x:
msizap TW! {424FEB85-17D9-4372-BB4F-52B8C004E70D}
ePO 5.9.x:
ePO 5.3.x:
ePO 5.1.x:
ePO 5.0.x:
- Remove the following miscellaneous ePO registry keys for your ePO version:
- ePO 5.10.x:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator
IMPORTANT: Don't delete the Agent or Application plug-ins subkeys if they exist and there are other products installed on the computer.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E2C3579A-6B3B-40F6-88E8-BE08E78C8D1A}_ePO
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{66C69D80-C95C-11d3-8A0B-006008C7D0F2}
- ePO 5.9.x:
HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Apache Software Foundation\Procrun 2.0\MCAFEETOMCATSRV###
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator
IMPORTANT: Don't delete the Agent or Application plug-ins subkeys if they exist and there are other products installed on the computer.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6DAACE3A-D62A-43B7-AD10-463FE542DF10}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{6DAACE3A-D62A-43B7-AD10-463FE542DF10}_ePO
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{66C69D80-C95C-11d3-8A0B-006008C7D0F2}
- ePO 5.3.x:
HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Apache Software Foundation\Procrun 2.0\MCAFEETOMCATSRV###
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator
IMPORTANT: Don't delete the Agent or Application plug-ins subkeys if they exist and there are other products installed on the computer.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{53B73DFD-AFBE-4715-88A1-777FE404B6AF}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{53B73DFD-AFBE-4715-88A1-777FE404B6AF}_ePO
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{66C69D80-C95C-11d3-8A0B-006008C7D0F2}
- ePO 5.1.x:
HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Apache Software Foundation\Procrun 2.0\MCAFEETOMCATSRV###
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator
IMPORTANT: Don't delete the Agent or Application plug-ins subkeys if they exist and there are other products installed on the computer.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{806ACE6E-C694-43FE-A470-160A332D7AF9}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{806ACE6E-C694-43FE-A470-160A332D7AF9}_ePO
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{66C69D80-C95C-11d3-8A0B-006008C7D0F2}
- ePO 5.0.x:
HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Apache Software Foundation\Procrun 2.0\MCAFEETOMCATSRV###
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\McAfee\ePolicy Orchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Network Associates\ePolicy Orchestrator
IMPORTANT: Don't delete the Agent or Application plug-ins subkeys if they exist and there are other products installed on the computer.
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{424FEB85-17D9-4372-BB4F-52B8C004E70D}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{424FEB85-17D9-4372-BB4F-52B8C004E70D}_ePO
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{66C69D80-C95C-11d3-8A0B-006008C7D0F2}
- Delete the ePO installation folder:
C:\Program Files\McAfee\ePolicy Orchestrator\
NOTE: You might need to restart the server for successful deletion.
- Delete the ePO icon on the Windows desktop, if it exists.
- Delete the ePO database using SQL Server Management Studio:
- Click Start, Programs, Microsoft SQL Server, SQL Server Management Studio.
- Click <Server_Name>, Databases.
NOTE: The <Server_Name> entry can also display local if the SQL database resides locally on that computer.
- Click the ePO database (the database name starts with
ePOXX_XXXX under Databases. - Right-click the ePO database to be deleted and click Delete. The Delete Object dialog box displays.
- Verify the database name and click OK.
Affected Products
Languages:
This article is available in the following languages:
