With the system attribute gone, I was then able to delete the files and clear the vulnerability from Nessus. Turns out that all four files had the system attribute set, so in an elevated command prompt, navigated to the folder and ran “attrib *.* -s -h -r” which removed the system attribute. Those files were quite persistent even changing permissions and ownership to Everyone did not allow them to be deleted, but did result in the fun message, “You require permission from Everyone to make changes to this file.” The only issue I had was that the DISM command (at least on 2016) still left the four ActiveX files under c:\windows\system32\macromed\flash intact, three of which were still triggering our Nessus scanner as critical vulnerabilities. Update: As John Storbeck posted in the comments, there is a KB to remove Adobe Flash now: KB4577586.
Or you can use Disable-WindowsOptionalFeature to uninstall Internet Explorer using PowerShell: Disable-WindowsOptionalFeature -FeatureName Internet-Explorer-Optional-amd64 –Online # use `DISM /Online /Get-Features` to list all enabled features If you then want to completely remove Internet Explorer (IE) from Windows Server, use the next command: DISM /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64 If you happen to still be on Windows Server 2012R2, you can use the following command to remove Flash Player: DISM /Online /Remove-Package /PackagePath:"C:\Windows\servicing\Packages\Adobe-Flash-For-Windows-Package~31bf3856ad364e35~amd64~~.16384.mum"Īnd for Windows Server 2019: DISM /Online /Remove-Package /PackagePath:"C:\Windows\servicing\Packages\Adobe-Flash-For-Windows-Package~31bf3856ad364e35~amd64~~3.1.mum"īasically the only difference is the build and version number.
ADOBE FLASH PLAYER UNINSTALLER WINDOWS INSTALL
If you want to, or have to, install Adobe Flash Player on Windows Server 2016 again, use: DISM /Online /Add-Package /PackagePath:"C:\Windows\servicing\Packages\Adobe-Flash-For-Windows-Package~31bf3856ad364e35~amd64~~3.0.mum" You can easily uninstall and remove Adobe Flash Player from Windows Server using Deployment Image Servicing and Management ( DISM): DISM /Online /Remove-Package /PackagePath:"C:\Windows\servicing\Packages\Adobe-Flash-For-Windows-Package~31bf3856ad364e35~amd64~~3.0.mum"
Yikes! I can imagine you want to delete Adobe Flash Player without deleting the RDSH role, and here is how.
ADOBE FLASH PLAYER UNINSTALLER WINDOWS UPDATE
Ever wondered why Windows Server Update Services ( WSUS) offers Flash updates for Windows Server? Adobe Flash Player is installed on Windows Server 2016 / 2019 if you have the Remote Desktop Session Host (RDSH) role installed.