Our company previously used Symantec Endpoint protection. The Symantec uninstaller left pieces of SEPP on around 50% of the workstations. Microsoft detected the presence of some of the unsupported Symantec EP registry keys/programs/files and would not make the Meltdown/Spectre security patches visible to the affected machines, even though we have a supported AV installed and the QualityCompat registry key is present.
I've used the Symantec "CleanWipe" utility on a few workstations to clean up the items left behind from the Symantec uninstaller. After running CleanWipe, the workstations were able to see the Microsoft patches.
The problem is I have over 200 workstations that cannot recieve the Microsoft security patches due to fragments of SEPP still being present after the uninstall.
I'm attempting to build a Solarwinds patchmanager package to perform an unattended execution of the CleanWipe utility. What are the command line options/switches available for an unattended execution?
Dave