- #UNINSTALL MCAFEE ENDPOINT SECURITY FOR MAC REGISTRATION#
- #UNINSTALL MCAFEE ENDPOINT SECURITY FOR MAC PASSWORD#
Su - $currentUser -c 'killall "McAfee Endpoint Security for Mac"' Su - $currentUser -c 'killall "McAfee Endpoint Protection for Mac"' Su - $currentUser -c 'launchctl unload /Library/LaunchAgents/' '/Library/Documentation/Help/McAfeeSecurity_Firewall.help' '/Library/Documentation/Help/McAfeeSecurity_ApplicationProtection.help' '/Library/Documentation/Help/McAfeeSecurity_AVOnly.help' '/Applications/McAfee Endpoint Security for Mac.app' '/Applications/McAfee Endpoint Protection for Mac.app' '/usr/local/McAfee/fmp/Extensions/NWCore.kext' '/usr/local/McAfee/fmp/Extensions/FileCore.kext' 'tocal/McAfee/fmp/Extensions/FMPSysCore.kext' '/usr/local/McAfee/StatefulFirewall/Extensions/SFKext.kext' '/usr/local/McAfee/AppProtection/Extensions/AppProtection.kext' '/usr/local/McAfee/AntiMalware/Extensions/AVKext.kext' read "/Users/$currentUser" NFSHomeDirectory | cut -d: -f 2 | sed 's/^ *//'| tr -d ' # don't assume the home folder is equal to the user's nameĬurrentUser=$(stat -f %Su "/dev/console")
#UNINSTALL MCAFEE ENDPOINT SECURITY FOR MAC REGISTRATION#
McAfee can also cause InTune registration to fail when blocking untrusted certificates. I found this script called RipOffMcAfee and then modified it to remove some additional extensions and framework for DLP. It may be the case here as well since it's calling sudo -S I will have to go back and check on that, but I know invoking any sudo commands in a script usually end up dropping the entire command that was run after it into the log.
I believe the one issue with this is that it may end up showing up in the system.log, which you could clear up later if so inclined with a carefully crafted grep/sed command.
#UNINSTALL MCAFEE ENDPOINT SECURITY FOR MAC PASSWORD#
You have to pass the product, like "EPM" to $4 and the password to $5. Removing AV."Įcho "$passAV" | sudo -S "$avUninstaller1022" "$prdVers"Įcho "McAfee AV product not found. Here's an example of how with a script we use in a policy #!/bin/bashĪvUninstaller1022="/usr/local/McAfee/uninstall"Įcho "McAfee AV 10.2.2 product found.
Rm -rf /Library/LaunchDaemons/com.mcafee*įWIW, you can actually send the password required for removing the McAfee EPM components (if required by your EPO admins) in a script, using Jamf script parameters of course. Launchctl unload /Library/LaunchDaemons/com.mcafee* & rm -rf /Library/Application Support/McAfee & rm -rf /Applications/McAfee Endpoint Security for Mac.app & rm -rf /Applications/McAfee Endpoint Protection for Mac.app & /Library/McAfee/agent/scripts/uninstall.sh & /Library/McAfee/cma/scripts/uninstall.sh
0 kommentar(er)
