Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Simple Batch Script To Uninstall Palo Alto GlobalProtect

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Simple Batch Script To Uninstall Palo Alto GlobalProtect

L1 Bithead

Simple Script to Wipe GP

 

@echo Uninstall GP only when user is on office Press Enter if user is on the office
Pause

@Echo $ Stoping services $

taskkill /im pangpa.exe /f
taskkill /im pangps.exe /f

@Echo + Uninstalling App +

wmic product where "description='Globalprotect' " uninstall

@Echo # Wait for the process and after that press enter

@Echo &R e m o v i n g - a n d d e l e t i n g f o l d e r s

sc stop PanGPS
sc delete PanGPS

rd "C:\Program Files\Palo Alto Networks" /s /q
taskkill /im pangpa.exe /f
rd "C:\users\%username%\%appdata%\local\Palo Alto Networks" /s /q


@Echo %_Deleting Registry keys %

Reg delete HKEY\LOCAL\MACHINE\Software\Palo Alto Networks\GlobalProtect\PanGPS /f
Reg delete HKLM\DRIVERS\DriverDatabase\DeviceIds\PanGpd /f
Reg delete HKLM\DRIVERS\DriverDatabase\DriverInfFiles\oem71.inf /f
Reg delete HKLM\DRIVERS\DriverDatabase\DriverPackages\pangpd.inf_amd64_5c5d20b3e9562905 /f
Reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpLockdownFiles\%SystemRoot%/system32/DRIVERS/pangpd.sys /f
Reg delete HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Setup\PnpLockdownFiles\%SystemRoot%/system32/DRIVERS/pangpd.sys /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015 /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Linkage /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\Interfaces /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\MAC /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\MediaStatus /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\MediaStatus\enum /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\MTU /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\PACKETS /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\SPEED /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#NET#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#NET#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{9ED715EC-5A4A-4B7B-B63C-22B8B256B72F} /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#NET#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{B897A75E-CA02-4D47-9DC9-E0F42D720B1D} /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#ROOT#NET#0000#{cac88484-7515-4c03-82e6-71a87abac361} /f
Reg delete HKLM\SYSTEM\ControlSet001\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#ROOT#NET#0000#{cac88484-7515-4c03-82e6-71a87abac361}\# /f
Reg delete HKLM\SYSTEM\ControlSet001\Enum\ROOT\NET /f
Reg delete HKLM\SYSTEM\ControlSet001\Enum\ROOT\NET\0000 /f
Reg delete "HKLM\SYSTEM\ControlSet001\Enum\ROOT\NET\0000\Device Parameters" /f
Reg delete HKLM\SYSTEM\ControlSet001\Services\PanGpd /f
Reg delete HKLM\SYSTEM\ControlSet001\Services\PanGpd\Enum /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015 /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Linkage /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\Interfaces /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\MAC /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\MediaStatus /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\MediaStatus\enum /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\MTU /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\PACKETS /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\Class\{4d36e972-e325-11ce-bfc1-08002be10318}\0015\Ndi\params\SPEED /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#NET#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c} /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#NET#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{9ED715EC-5A4A-4B7B-B63C-22B8B256B72F} /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\DeviceClasses\{ad498944-762f-11d0-8dcb-00c04fc3358c}\##?#ROOT#NET#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}\#{B897A75E-CA02-4D47-9DC9-E0F42D720B1D} /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#ROOT#NET#0000#{cac88484-7515-4c03-82e6-71a87abac361} /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Control\DeviceClasses\{cac88484-7515-4c03-82e6-71a87abac361}\##?#ROOT#NET#0000#{cac88484-7515-4c03-82e6-71a87abac361}\# /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Enum\ROOT\NET /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Enum\ROOT\NET\0000 /f
Reg delete "HKLM\SYSTEM\CurrentControlSet\Enum\ROOT\NET\0000\Device Parameters" /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Services\PanGpd /f
Reg delete HKLM\SYSTEM\CurrentControlSet\Services\PanGpd\Enum /f

@echo Press one key to restat the machine
pause

Shutdown /r

Microsoft Certified Azure Administrator Associate
ITIL Foundation v4 Certified
Microsoft Certified Azure Fundamentals
Symantec SSE+
Mcafee Certified
MikroTik Certified Network Associate
Microsoft Certified Desktop Support Technician
Microsoft Systems Administrator
0 REPLIES 0
  • 4937 Views
  • 0 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!