https://live.paloaltonetworks.com/t5/general-topics/problems-for-deactivate-cyserver-cortex-xdr/m-p/1225868#M123900 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/192671">@Alpalo</a>,</P> <P>Do you still have access to your tenant? The easiest path forward here is going to be issuing an uninstall if you wish to remove it completely, or by disabling tamper detection so you can disable the service as an administrator if needed. If you don't have access to the tenant any longer things get more complicated and the most "direct" path is contacting TAC to get the agent cleaner which you'll need to run in safe mode. </P> Mon, 07 Apr 2025 22:00:56 GMT BPry 2025-04-07T22:00:56Z https://live.paloaltonetworks.com/t5/general-topics/problems-for-deactivate-cyserver-cortex-xdr/m-p/1225605#M123874 <P>Hi team</P> <P>Is there any way to disable this service? Even if I run the commands cytool protect disable or cytool runtime stop, it won't let me disable it, I get the message Access is denied.</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Alpalo_0-1743697113968.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/66920i5577F89E87AD2A2A/image-size/medium?v=v2&amp;px=400" role="button" title="Alpalo_0-1743697113968.png" alt="Alpalo_0-1743697113968.png" /></span></P> <P>Regards</P> <P>&nbsp;</P> Thu, 03 Apr 2025 16:18:44 GMT https://live.paloaltonetworks.com/t5/general-topics/problems-for-deactivate-cyserver-cortex-xdr/m-p/1225605#M123874 Alpalo 2025-04-03T16:18:44Z https://live.paloaltonetworks.com/t5/general-topics/problems-for-deactivate-cyserver-cortex-xdr/m-p/1225868#M123900 <P><a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/192671">@Alpalo</a>,</P> <P>Do you still have access to your tenant? The easiest path forward here is going to be issuing an uninstall if you wish to remove it completely, or by disabling tamper detection so you can disable the service as an administrator if needed. If you don't have access to the tenant any longer things get more complicated and the most "direct" path is contacting TAC to get the agent cleaner which you'll need to run in safe mode. </P> Mon, 07 Apr 2025 22:00:56 GMT https://live.paloaltonetworks.com/t5/general-topics/problems-for-deactivate-cyserver-cortex-xdr/m-p/1225868#M123900 BPry 2025-04-07T22:00:56Z