- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
05-19-2022 03:57 AM
Hello
We have 2 machines with Cortex XDR, version 7.2.0.63060 one and version 7.5.0.36150 other
This machines cannot update, and we cannot uninstall cortex in those machines.
We try do this:
cytool protect disable
And then try uninstall, but does,t resolve
Can you help me
Thanks
Pedro Dias
05-24-2022 06:25 AM
Hi @pedrodias2020 ,
In order to get more traction for this I have moved this topic to the Cortex XDR discussions area.
Cheers,
-Kiwi.
05-24-2022 06:31 AM
Hi @pedrodias2020 ,
the best practise is to uninstall from the tenant. If somehow these two endpoints have lost the communications with the tenant, I would recommend to get the uninstaller and boot the endpoints in safe mode. You should be able to uninstall this way.
As a best practise, we also recommend to be updated to the latest releases of the agent. Version 7.7.1 has improved a lot in terms of health and how to manage the agent with tokens wich is a new feature.
I hope this helped
KR,
Luis
05-24-2022 07:30 AM
If you are trying to uninstall on a Windows machine, I would suggest you also look at the XDR agent admin guide. In the uninstall section, it is explained how to use admin cmd and the msiexec method to uninstall the agent. Just remember that you need to have the same installation package version as the one installed locally for the method to work.
You could also open a TAC case explaining the situation. It is quite odd that after you disable protections, the agent doesn't uninstall.
06-24-2022 03:46 AM
Tnak you for all
I used traps cleaner 6.2.0 and it works
Remove cortex
Thanks
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!