FortiEDR
FortiEDR automates the protection against advanced threats, pre and post-execution, with real time orchestrated incident response functionality.
kwernecke
Staff
Staff
Article Id 204134
Description This article describes How to uninstall with msiexec using product id guid
Scope FortiEDR
Solution

The Guide is Different for ALL VERSIONS of the Product

1) How to find the FortiEDR or FortiEDR uninstallation product key aka Guid 3 different ways:

 

First Way Registry.

2) Select Start -> Run.

3) Type regedit to open the Windows Registry Editor.

4) Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\

5) Browse the Uninstall subkeys in the left-hand pane, and check the values in the right-hand pane to find a value for the DisplayName that equals FortiEDR or FortiEDR

6) Copy the uninstallation key. For example, the key for GUID out FortiEDR version = 3.1.1.608  - Guid = {01C88AE6-6782-4798-81C6-954E0D14FCF5} Close the Windows Registry Editor.

 

Second Way PowerShell.

 

1) It is also possible to find the uninstall Guid in PowerShell with this command:   get-wmiobject Win32_Product | Format-Table IdentifyingNumber, Name.

 

kwernecke_0-1643849720390.png

 

Third Way Orca a free Tool.

1) Download Orca.

2) Open Orca

3) Drag a version of the FortiEDR Or FortiEDR .msi file over the open Orca window

4) Select 'Property' in left Column

5) Find Product Code on right and copy it out.

 

kwernecke_2-1643849785133.png

 

It is possible to find the registration password in the console.

 

kwernecke_3-1643849836646.png

 

1) Select Start -> Run.

2) Type cmd to open the Windows command prompt.

3) Open the command prompt as Administrator.

4) At the Windows command prompt, type or paste: msiexec.exe /x enter the Guid here /qn UPWD=enter the registration password here RMCONFIG=1 /l*vx log.txt.

 

IMPORTANT: (Make sure to use the Correct Registration Password and Product GUID)

 Example:

 

kwernecke_4-1643849888064.png

 

Alternate Command Requires the msi file and it is necessary to be in the same directory you are running it from in the command prompt or add the path to the command.

 

2 Ways:

 

This way: Ran from same directory the msi installers is located: msiexec /x FortiEDRCollectorInstaller64_4.1.0.491.msi /qn UPWD=123456789 RMCONFIG=1 /l*vx log.txt.


This way: Ran with the path to the msi file in the command: msiexec /x C:\Users\kimwernecke\Desktop\FortiEDRCollectorInstaller64_4.1.0.491.msi /qn UPWD=123456789 RMCONFIG=1 /l*vx log.txt

 

Example of how to make a batch file to uninstall.

 

Save the file as a .bat file.

 

kwernecke_5-1643849926999.png
Comments
vgreen
Staff
Staff

Great article Kim

Contributors