FortiEDR
FortiEDR automates the protection against advanced threats, pre and post-execution, with real time orchestrated incident response functionality.
kwernecke
Staff
Staff
Article Id 199127
Description This article descripes how to uninstall using product guid. 
Scope  
Solution

How to uninstall with msiexec using product id guid without .msi file present FortiEDR using the Product Code Guid by version:

 

The Guid is Different for ALL VERSIONS of the Product

How to find the FortiEDR uninstallation product key aka Guid 3 different ways:

 

First Way Registry.

 

1) Click Start > Run.

 

2) Type regedit to open the Windows Registry Editor.

 

3) Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

 

4) Browse the Uninstall subkeys in the left-hand pane, and check the values in the right-hand pane to find a value for the DisplayName that equals FortiEDR

- Or-

5) Copy the uninstallation key. For example, the key for GUID out FortiEDR version = 3.1.1.608  - Guid = {01C88AE6-6782-4798-81C6-954E0D14FCF5} Close the Windows Registry Editor.

 

Second Way PowerShell.

 

6) It is also possible to find the uninstall Guid in PowerShell with this command: get-wmiobject Win32_Product | Format-Table IdentifyingNumber, Name

 

Third Way Orca a free Tool.

 

1) Download Orca.

2) Open Orca.

3) Drag a version of the FortiEDR  .msi file over the open Orca window.

4) Select 'Property' in left Column

5) Find Product Code on right and copy it out

 

It is possible to find the registration password in the console

Administrator -> Tools -> Component Authentication -> Display.

 

1) Select Start > Run.

 

2) Type cmd to open the Windows command prompt.

 

3) Open the command prompt as Administrator.

 

4) At the Windows command prompt, type or paste: msiexec.exe /x enter the Guid here /qn UPWD=enter the registration password here RMCONFIG=1 /l*vx log.txt

 

IMPORTANT.

(Make sure to use the Correct Registration Password and Product GUID).

 

Alternate Command Requires the msi file and it will be necessary to be in the same directory where the command is prompted or add the path to the command.

 

2 Ways.

This way: Ran from same directory the msi installers is located: msiexec /x CollectorInstaller64_4.1.0.491.msi /qn UPWD=123456789 RMCONFIG=1 /l*vx log.txt
This way: Ran with the path to the msi file in the command: msiexec /x C:\Users\kimwernecke\Desktop\CollectorInstaller64_4.1.0.491.msi /qn UPWD=123456789 RMCONFIG=1 /l*vx log.txt

Contributors