We have 2 machines with Cortex XDR, version 126.96.36.199060 one and version 188.8.131.52150 other
This machines cannot update, and we cannot uninstall cortex in those machines.
We try do this:
cytool protect disable
And then try uninstall, but does,t resolve
Can you help me
Hi @pedrodias2020 ,
the best practise is to uninstall from the tenant. If somehow these two endpoints have lost the communications with the tenant, I would recommend to get the uninstaller and boot the endpoints in safe mode. You should be able to uninstall this way.
As a best practise, we also recommend to be updated to the latest releases of the agent. Version 7.7.1 has improved a lot in terms of health and how to manage the agent with tokens wich is a new feature.
I hope this helped
If you are trying to uninstall on a Windows machine, I would suggest you also look at the XDR agent admin guide. In the uninstall section, it is explained how to use admin cmd and the msiexec method to uninstall the agent. Just remember that you need to have the same installation package version as the one installed locally for the method to work.
You could also open a TAC case explaining the situation. It is quite odd that after you disable protections, the agent doesn't uninstall.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!