Microsoft Security Client Uninstall Command

/ Comments off
Active3 years, 3 months ago
  1. Jul 25, 2018  Install and Uninstall Microsoft Teams Install or Uninstall Microsoft Teams Client PowerShell script for Windows. Select 32bit or 64bit version.
  2. I have Microsoft Forefront Endpoint Protection installaed on WIN7 machine. I need to remove it silently (without UI). For that I picked up UninstallString from registry and executed it on command prompt as following: 'C: Program FIles Microsoft Security Client Setup.exe' /X. After executing this command, an Uninstallation window appears.
  3. This will open an elevated command prompt as Administrator; In the command prompt window copy/paste or type the following: cd C: Program Files Microsoft Security Client setup.exe /x /disableoslimit Choose to Uninstall. Once this has finished, reboot and Microsoft Security Essentials will be gone and Windows Defender should be running correctly.
  4. How to uninstall Microsoft Security Essentials using Command Line (CMD)? How to uninstall Microsoft Security Essentials using a script? SOLUTION: Uninstall using command line. 1.) Open a command prompt in administrator mode. 2.) Copy and paste the following command.

From a command prompt on the client; Unenroll by using the Intune admin console. To unenroll the software client by using the Intune admin console, go to Groups All Computers Devices. Right-click the client, and select Retire/Wipe. Unenroll by using a command prompt on the client. Using an elevated command prompt, run one of the following commands.

When trying to uninstall Microsoft Security Essentials on Windows Vista x86 via Programs and Features, I got an error message, code 8007066F, with no description. How can I remove Security Essentials?

Canadian LukeCanadian Luke
18.5k33 gold badges97 silver badges154 bronze badges

2 Answers

The above links didn't work for me, but the response here by GlenDelport worked.

From the URL (with minor modifications):

  • Browse to C:Program FilesMicrosoft Security Client
  • Locate the file Setup.exe, right click on it and choose properties
  • Click on the Compatibility tab
  • At the bottom of the tab click 'Change Settings for all users'
  • On the next screen check the box for 'Run this program in compatibility mode for:' and choose Windows 7
  • Click OK
  • Click OK
  • From the taskbar search box type cmd.exe and right click and choose 'Run As Administrator'. This will open an elevated command prompt as Administrator

  • In the command prompt window copy/paste or type the following:

  • Choose to Uninstall

  • Once this has finished, reboot and Microsoft Security Essentials will be gone and Windows Defender should be running correctly.
Achal DaveAchal Dave

Microsoft published a Fixit tool for this at KB 2435760. After running this, Security Essentials was removed, but I still needed to remove the executable from the startup list. I did this by going to Start->type inMSCONFIG and pressing Enter. Once the MSConfig tool started, I clicked on Startup, and unticked 'Microsoft Security Essentials' from the list.

There is this Microsoft Fix It if the above link does not resolve the issue.

Moab
52.5k14 gold badges98 silver badges161 bronze badges
Canadian LukeCanadian Luke
18.5k33 gold badges97 silver badges154 bronze badges

Not the answer you're looking for? Browse other questions tagged windowsuninstallms-security-essentials or ask your own question.

-->
Applies to: Intune in the classic portal
Looking for documentation about Intune in the Azure portal? Go here.

Note

You can use Microsoft Intune to manage Windows PCs either as mobile devices with mobile device management (MDM) or as computers with the Intune software client as described below. However, Microsoft recommends that customers use the MDM management solution whenever possible. For more information see Compare managing Windows PCs as computers or mobile devices

Windows PCs can be enrolled by installing the Intune client software. The Intune client software can be installed by using the following methods:

  • By the IT admin, using one of these methods: manual installation, Group Policy, or installation included in a disk image

  • By end users, who manually install the client software

The Intune client software contains the minimum software necessary to enroll the PC in Intune management. After a PC has been enrolled, the Intune client software then downloads the full client software required for PC management.

This series of downloads reduces the impact on the network's bandwidth and minimizes the time required to initially enroll the PC in Intune. It also ensures that the client has the most recent software available after the second download has finished.

One Intune license allows the installation of the Intune client software on up to five PCs.

Download the Intune client software

All methods, except those in which users install the Intune client software themselves, require that IT admins download the software first so that it can be subsequently deployed to end users.

  1. In the Microsoft Intune administration console, click Admin > Client Software Download.

  2. On the Client Software Download page, click Download Client Software. Then save the Microsoft_Intune_Setup.zipDownload proteus 8 professional library. package that contains the software to a secure location on your network.

    The Intune client software installation package contains unique and specific information, which is available through an embedded certificate, about your account. If unauthorized users gain access to the installation package, they can enroll PCs to the account that is represented by its embedded certificate and might gain access to company resources.

  3. Extract the contents of the installation package to the secure location on your network.

    Important

    Do not rename or remove the ACCOUNTCERT file that is extracted, or the client software installation will fail.

Deploy the client software manually

On the computer(s) on which the client software is going to be installed, go to the folder where the client software installation files are located. Then run Microsoft_Intune_Setup.exe to install the client software.

Note

The status of the installation is displayed when you hover over the icon in the taskbar on the client PC.

Deploy the client software by using Group Policy

  1. In the folder that contains the files Microsoft_Intune_Setup.exe and MicrosoftIntune.accountcert, run the following command to extract the Windows Installer-based installation programs for 32-bit and 64-bit computers:

  2. Copy the Microsoft_Intune_x86.msi file, the Microsoft_Intune_x64.msi file, and the MicrosoftIntune.accountcert file to a network location that can be accessed by all computers on which the client software is going to be installed.

    Important

    Do not separate or rename the files or the client software installation will fail.

  3. Use Group Policy to deploy the software to computers on your network.

    For more information about how to use Group Policy to automatically deploy software, see Group Policy for Beginners.

Deploy the client software as part of an image

You can deploy the Intune client software to computers as part of an operating system image by using the following procedure as a guide:

  1. Copy the client installation files, Microsoft_Intune_Setup.exe and MicrosoftIntune.accountcert, to the %Systemdrive%TempMicrosoft_Intune_Setup folder on the reference computer.

  2. Create the WindowsIntuneEnrollPending registry entry by adding the following command to the SetupComplete.cmd script:

  3. Add the following command to setupcomplete.cmd to run the enrollment package with the /PrepareEnroll command-line argument:

    Tip

    The SetupComplete.cmd script enables Windows Setup to make modifications to the system before a user signs on. The /PrepareEnroll command-line argument prepares a targeted computer to be automatically enrolled in Intune after Windows Setup finishes.

  4. Put SetupComplete.cmd in the %Windir%SetupScripts folder on the reference computer.

  5. Capture an image of the reference computer and then deploy this to targeted computers.

    When the targeted computer restarts at the completion of Windows Setup, the WindowsIntuneEnrollPending registry key is created. The enrollment package checks to see if the computer is enrolled. If the computer is enrolled, no further action is taken. If the computer is not enrolled, the enrollment package creates a Microsoft Intune Automatic Enrollment Task.

    When the automatic enrollment task runs at the next scheduled time, it checks the existence of the WindowsIntuneEnrollPending registry value, and it tries to enroll the targeted PC in Intune. If the enrollment fails for any reason, the enrollment is retried the next time the task runs. The retries continue for a month.

    The Intune Automatic Enrollment Task, the WindowsIntuneEnrollPending registry value, and the account certificate are deleted from the targeted computer either when the enrollment is successful or after a month (whichever comes first).

Instruct users to self-enroll

Users install the Intune client software by going to the Company Portal website. The exact information that users see in the web portal varies, depending on your account's MDM Authority and the OS platform/version of the user's PC.

If users haven't been assigned an Intune license or if the organization's MDM Authority hasn't been set to Intune, users aren't shown any options to enroll.

If users have been assigned an Intune license, and the organization's MDM Authority has been set to Intune:

  • Windows 7 or Windows 8 PC users are shown ONLY the option to enroll to Intune by downloading and installing the PC client software that is unique to their organization.

  • Windows 10 or Windows 8.1 PC users are shown two enrollment options:

    • Enroll PC as a mobile device: Users choose the Find Out How to Enroll button and are taken to instructions on how to enroll their PC as a mobile device. This button is prominently displayed, because MDM enrollment is considered to be the default and preferred enrollment option. However, the MDM option is not applicable to this topic, which covers only the client software installation.
    • Enroll PC using the Intune client software: You'll need to tell your users to select the Click here to download it link, which takes them through the client software installation.

The following table summarizes the options.

The following screenshots show what users see as they enroll their devices using the software client.

Sony raw codec windows 10. Advanced notice of the scheduled discontinuation of downloads for Sony RAW Driver Sony RAW Driver Download will no longer be available for download as of March, 2020. Sony RAW Driver is a program to display Sony RAW data. (ARW/SR2/SRF files) on Windows ® 7 ⁄ Windows ® 8.1 ⁄ Windows ® 10.

Users are first prompted to identify or to enroll their device.

To have your users install the PC client software, you'll need to tell them to select the Click here to download it link, which enables users to download the PC client software and takes them through the installation process. The Find out how to enroll button takes users to documentation about how to enroll using MDM enrollment, which is not relevant to these software client instructions.

When users click the link, they see a Download Software button, which they select to start the PC client software installation.

Users are then asked to sign in with their corporate credentials.

Users are taken to the Welcome page for the installation.

Users choose Next, and the installation starts.

When the installation completes, users choose Finish.

If users try to enroll their PC as a mobile device after having already enrolled using the Intune PC client software, they see the following error screen.

Monitor and validate successful client deployment

Use one of the following procedures to help you monitor and validate successful client deployment.

To verify the installation of the client software from the Microsoft Intune administrator console

  1. In the Microsoft Intune administration console, click Groups > All Devices > All Computers.

  2. In the list, find the computers that are communicating with Intune, or search for a specific managed computer by typing the computer name (or any part of the name) in the Search devices box.

  3. Examine the status of the computer in the bottom pane of the console. Resolve any errors.

To create a computer inventory report to display all enrolled computers

  1. In the Microsoft Intune administration console, click Reports > Computer Inventory Reports.

  2. On the Create New Report page, leave the default values in all fields (unless you want to apply filters), and then click View Report.

  3. The Computer Inventory Report page opens in a new window that displays all computers that are successfully enrolled in Intune.

    Tip

    Click any column heading in the report to sort the list by the contents of that column.

Uninstall the Windows client software

There are two ways to unenroll the Windows client software:

  • From the Intune admin console (recommended method)
  • From a command prompt on the client

Unenroll by using the Intune admin console

To unenroll the software client by using the Intune admin console, go to Groups > All Computers > Devices. Right-click the client, and select Retire/Wipe.

Unenroll by using a command prompt on the client

Using an elevated command prompt, run one of the following commands.

Method 1:

Method 2 Note that all of these agents are installed on every SKU of Windows:

Tip

Client unenrollment will leave a stale server-side record for the affected client. The unenrollment process is asynchronous, and there are nine agents to uninstall, so it may take up to 30 mins to complete.

Check the unenrollment status

Check '%ProgramFiles%MicrosoftOnlineManagement' and ensure that only the following directories are shown on the left:

Uninstall Microsoft Security Essentials Tool

  • AgentInstaller
  • Logs
  • Updates
  • Common

Microsoft Security Client Uninstall Command Mac

Remove the OnlineManagement folder

The unenrollment process does not remove the OnlineManagement folder. Wait 30 minutes after the uninstall, and then run this command. If you run it too soon, the uninstall could be left in an unknown state. To remove the folder, start an elevated prompt and run:

Remove Microsoft Security

Next steps