How to disable the Host Intrusion Prevention client when no ePO server is available

Technical Articles ID: KB58629
Last Modified: 9/1/2020

Environment

McAfee Host Intrusion Prevention 8.0

Summary

Because of agent self-protection, the Host IPS client can't be uninstalled while IPS protection is enabled. (This situation is true whether you try to uninstall using Add or Remove programs or by manually stopping the McAfee Host Intrusion Prevention service.)

Solution

If the Host IPS clientUI default unlock password has not yet been changed, disable the Host IPS client manually by unlocking the Host IPS client UI tray:

Click Start, Run, type File Explorer and click OK.
Navigate to: C:\Program Files\McAfee\Host Intrusion Prevention\.
Double-click McAfeeFire.exe.
Click Task, Unlock User Interface.
Type the unlock code, and select Administrator Password.

NOTE: By default, the unlock code is abcde12345.
After the user interface is unlocked, click the IPS Policy tab.
Deselect Enable Host IPS and Enable Network IPS. (The Firewall Policy can be disabled on its own tab.)
Select Task, Exit.

Solution

If the default unlock password has been changed, start the client in Windows Safe Mode and disable the Host IPS agent service.

Start the client in Safe Mode. For details about Safe Mode, see Microsoft Support at: http://support.microsoft.com.
Click Start, Run, type services.msc and click OK.
Double-click the McAfee Host Intrusion Prevention Service.
Select Disabled under Startup type.
Restart the client in Normal Mode.
Click Start, Run, type regedit and click OK.
Navigate to and expand the following key:

[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall]
Locate the GUID for the installed version of Host IPS.
Run the uninstall string value. It removes the client.

Affected Products

Host Intrusion Prevention 8.0

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

How to disable the Host Intrusion Prevention client when no ePO server is available

Environment

Summary

Solution

Solution

Affected Products

Glossary of Technical Terms

Title

Title

Knowledge Center

How to disable the Host Intrusion Prevention client when no ePO server is available

Environment

Summary

Solution

Solution

Affected Products

Glossary of Technical Terms

Choose your region

Title

Title