Remote Uninstall of Amp

rlongfield — Wed, 07 Jul 2021 13:59:22 GMT

I am looking for a way to uninstall Amp from a remote computer. Unfortunately I am unable to use powershell so I tried to use psexec to uninstall Amp from a target machine on the network.

If I connect to the target machine and run the following command from the command line Amp is uninstalled

"\\server12\software\Cisco AMP for Endpoints\amp_Protect.exe" /R /S /remove 1 /uninstallpassword "SecretPassWord"

However if I wrap that same command inside a psexec command (below) I get an error code 1323 which is a wrong password error. It seems that the /uninstallpassword is not being passed through.
I have tried enclosing the password in double, and single quotes as well as with no quotes. I have tried using the -u psexec switch and using an admin account with no change. Every time I get the 1323 error.

psexec \\remote-machine -s -h "\\server12\software\Cisco AMP for Endpoints\amp_Protect.exe" /R /S /remove 1 /uninstallpassword "SecretPassWord"

I would really appreciate any help with this.

Re: Remote Uninstall of Amp

ppreenja — Tue, 20 Jul 2021 11:08:57 GMT

Hi,

We have an enhancement feature request for the same as below:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvq81718

You can add yourself to the notification on the same so as to get to know whenever there is a fix. However, there is no ETA for the same.

Cheers,

Pratham

topic Remote Uninstall of Amp in Endpoint Security

Remote Uninstall of Amp

Re: Remote Uninstall of Amp