Custom ADM help - change DWORD values

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

We are going to move to a MS antivirus solution. We need to uninstall
SymantecAV first and want to do this with a script using PSTools. The
following has been tested and uninstalls SAV v10 silently w/out reboot. We
may use psexec in a script.

C:\PSTools\> psexec.exe \\computername.domain.name msiexec /qr /x
{33CFCF98-F8D6-4549-B469-6F4295676D83}

However, before the command can be run, we need to modify two values:
"LockUnloadServices"=dword:00000000
"UseVPUninstallPassword"=dword:00000000

These are located in the following key:
[HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security]
"LockUnloadServices"=dword:00000001
"UseScanNetDrivePassword"=dword:00000001
"UseVPUninstallPassword"=dword:00000001
"NetScanPassword"="1084A085DC6BD2D755D4D6A7726"
"VPUninstallPassword"="1084A085DC6BD2D755D4D6A7726"

I believe the best way to push these values across the network is to use a
GPO and attach an ADM template that will modify these values.

I am unsure how to create the template; will the following work ok?


;--------------------------------------
CLASS MACHINE
CATEGORY "Symantec AntiVirus"
POLICY "Symantec Require Uninstall Password"
KEYNAME
"MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion\AdministratorOnly\Security"
EXPLAIN "Modifies LockUnloadServices and UseVPUninstallPassword to not
require a password to uninstall Symantec anti-virus"
PART "LockUnloadServices" REG_DWORD = 0

END PART

PART "UseVPUninstallPassword" REG_DWORD = 0

END PART
END POLICY
END CATEGORY
;--------------------------------------

Many thanks for your help!
Jason

.

Relevant Pages