{"id":150,"date":"2009-04-02T08:27:43","date_gmt":"2009-04-02T13:27:43","guid":{"rendered":"http:\/\/nukeitmike.com\/blog\/2009\/04\/02\/uninstalling-forefront-from-server-core\/%20"},"modified":"2009-04-02T08:27:43","modified_gmt":"2009-04-02T13:27:43","slug":"uninstalling-forefront-from-server-core","status":"publish","type":"post","link":"https:\/\/blog.nukeitmike.com\/index.php\/2009\/04\/02\/uninstalling-forefront-from-server-core\/","title":{"rendered":"Uninstalling Forefront from Server Core"},"content":{"rendered":"<p>The best way to uninstall any program from Server Core, is to go into the registry to <em>HKLM\\software\\Microsoft\\Windows\\CurrentVersion\\Uninstall<\/em> .\u00a0 In there, you will see GUID for the various programs that are installed.\u00a0 If you select the GUID and look at the right had side you will see some good information:<\/p>\n<p>\u00a0<\/p>\n<p><a href=\"https:\/\/i0.wp.com\/blog.nukeitmike.com\/wp-content\/uploads\/2009\/04\/image.png?ssl=1\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" style=\"border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px\" title=\"image\" src=\"https:\/\/i0.wp.com\/blog.nukeitmike.com\/wp-content\/uploads\/2009\/04\/image-thumb.png?resize=640%2C377&#038;ssl=1\" border=\"0\" alt=\"image\" width=\"640\" height=\"377\" \/><\/a><\/p>\n<p>One of the <em>REG_EXPAND_SZ<\/em> values on the right is the <em>UninstallString<\/em>.\u00a0 If you copy that value and paste it into the command line, it will politely ask:\u00a0 Are you sure you want to uninstall this product?\u00a0 If you are sure you want to uninstall it, go ahead and hit Ok.<\/p>\n<p>If you want to get rid of both pieces of Forefront ( the Security State Assessment Service, and the Client Security Antimalware Service) you will need to find both registry keys and run both uninstalls.\u00a0 There is a catch though\u2026\u00a0 the Client Security Antimalware Service has a value that looks like this: <em>MsiExec.exe \/I{436028CD-6476-4224-9274-8F0320F30FD1}.<\/em>\u00a0 To get it to uninstall, you need to change the \/I to \/X like this <em>MsiExec.exe \/X{436028CD-6476-4224-9274-8F0320F30FD1}.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The best way to uninstall any program from Server Core, is to go into the registry to HKLM\\software\\Microsoft\\Windows\\CurrentVersion\\Uninstall .\u00a0 In there, you will see GUID for the various programs that are installed.\u00a0 If you select the GUID and look at the right had side you will see some good information: \u00a0 One of the REG_EXPAND_SZ&hellip; <a class=\"more-link\" href=\"https:\/\/blog.nukeitmike.com\/index.php\/2009\/04\/02\/uninstalling-forefront-from-server-core\/\">Continue reading <span class=\"screen-reader-text\">Uninstalling Forefront from Server Core<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"advanced_seo_description":"","jetpack_seo_html_title":"","jetpack_seo_noindex":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[9,10,28],"tags":[47,93,147,183],"class_list":["post-150","post","type-post","status-publish","format-standard","hentry","category-forefront-client-security","category-general-info","category-server-core","tag-add-or-remove-programs","tag-forefront","tag-registry","tag-uninstall","entry"],"jetpack_featured_media_url":"","jetpack-related-posts":[],"jetpack_likes_enabled":true,"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pcW544-2q","_links":{"self":[{"href":"https:\/\/blog.nukeitmike.com\/index.php\/wp-json\/wp\/v2\/posts\/150","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.nukeitmike.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.nukeitmike.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.nukeitmike.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.nukeitmike.com\/index.php\/wp-json\/wp\/v2\/comments?post=150"}],"version-history":[{"count":0,"href":"https:\/\/blog.nukeitmike.com\/index.php\/wp-json\/wp\/v2\/posts\/150\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.nukeitmike.com\/index.php\/wp-json\/wp\/v2\/media?parent=150"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.nukeitmike.com\/index.php\/wp-json\/wp\/v2\/categories?post=150"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.nukeitmike.com\/index.php\/wp-json\/wp\/v2\/tags?post=150"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}