Environment
Situation
Resolution
1. Open the following location:
-C:\Program Files\NetIQ Security Manager\OnePoint\Providers\smconfiggroup\ChangeGuardianProvider
a. Run the CGWDriverUninstall.EXE
b. List select CGW and uninstall it (drivers)
2. Stop NetIQ Agent Service
3. Open the following locations for W2K3:
- C:\Program Files\NetIQ
* Delete the Change "Guardian for Windows" folder
- C:\Program Files\NetIQ Security Manager\OnePoint\Providers\smconfiggroup\
* Delete the "ChangeGuardianProvider" folder
-C:\Program Files\NetIQ Security Manager\OnePoint\InstallMcsApps\ProgrammableProvider
* Delete the "ChangeGuardianProvider.cab" file
-C:\Documents and Settings\All Users\Application Data\NetIQ\Security Manager\smconfiggroup
* Delete the ?win32_ChangeGuardianProvider.pqf?file
Open the following locations for W2K8:
-C:\ProgramData\NetIQ\Security Manager\smconfiggroup
* Delete the ?win32_ChangeGuardianProvider.pqf? file
4. Delete the registry keys below:
HKLM\System\ControlSet001\Enum\Root
Legacy Keys found under:
LEGACY_CGWFILTR
LEGACY_CGWFUNC_02_00_0091 (the numbers at the end may vary depending on what previous versions of change guardian were installed)
LEGACY_CGWREC
HKLM\System\ControlSet003\Enum\Root
Legacy Keys found under:
LEGACY_CGWFILTR
LEGACY_CGWFUNC_02_00_0091 (the numbers at the end may vary depending on what previous versions of change guardian were installed)
LEGACY_CGWREC
HKLM\System\ControlSet001\Services\NetIQ Change Guardian for Windows Server
HKLM\System\ControlSet003\Services\NetIQ Change Guardian for Windows Server
HKLM\Software\NetIQ\Change Guardian for Windows
5. Reboot the machine to remove CGW from memory.