Remove password from SEP when unknown or forgotten

Warning: This will leave your system unprotected and you could damage your system if you don’t know what you’re doing.

Note: If you system is managed by an IT department and you’re not in IT please seek their help with the problem you are facing. Dont put your company’s system at risk because you don’t like they way its setup. ONLY DO THESE STEPS IF YOU HAVE AUTHORIZATION TO DO SO.

Problem: What to do to upgrade/repair/fix setting on an install of Symantec Endpoint protection when the password is unknown/lost/forgotten.

Option 1: try default passwords

  • symantec
  • password
  • admin
  • norton
  • 12345
  • company name or stock symbol

Option 2: you could try sylinkdrop or SylinkReplacer to change the client from managed to unmanaged by replacing the sylink.xml to default, but you will most likely need the password as this step requires you to stop the service and will most likely be locked.

Option 3: Force the removal of the password.

    1. take backup of registry
    2. stop the SEP service, from services or command “start smc -stop”
    3. boot in to safemode (if step one fails)
    4. open regedit
    5. HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC
    6. delete key “SmcInstData” (this is where the password is keep, you cant delete if service is running)
    7. HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\SepMasterService (only if step 1 failed, this will disable your SEP service)
    8. Change Key “Start” to “3”
    9. reboot to normal windows
    10. uninstall/upgrade/repair your SEP or what ever else you needed to do. The password should be gone.

5 Responses to Remove password from SEP when unknown or forgotten

  1. Amanda says:

    Wow that was odd. I just wrote an very long comment but after I clicked submit my comment didn’t appear. Grrrr… well I’m not writing all that over again.
    Anyways, just wanted to say wonderful blog!

  2. Cora says:

    My brother suggested I might like this website. He was
    entirely right. This post actually made my day. You cann’t imagine simply how much time I had spent for this info! Thanks!

  3. Do you mind if I quote a few of your articles as long as I provide credit and sources back
    to your weblog? My blog is in the very same niche as yours and my users would genuinely benefit from a lot of the information you provide here.

    Please let me know if this okay with you. Cheers!

  4. Nathan says:

    I had done the steps but when I chose delete SmcInstData, Error Deleting Values appeared Unable to delete all specified values, what should I do?

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: