Remove enopoint XDR Cortex

[RokGrm]

Hi 

Can i remove XDR Agent from PC and i don*t have supervisor password for disable antitampering... 

Endpoint are not showing in XDR Console... 

please help, i have problems with cca 200pc

best regards...

[jmazzeo]

Hi @RokGrm, thanks for reaching us using the Live Community.

Have you tried the default password? It is: Password1

If this one doesn't work, you will have to open a support case, and they will share the uninstaller tool with you.

If this post answers your question, please mark it as the solution.

[RokGrm]

Hi...

we already try password1 but no luck... 

is there any other way to bypass ?

best regards

[jmazzeo]

There is no other way, you will need to contact support for the uninstaller tool.

[Fm12345]

Did you try to use cytool as admin to query the token on the endpoint. Use command: cytool.exe token query.

It should give you a hash using which you can retrieve password from xdr console-> endpoints page. See references below:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/7.7/Cortex-XDR-Agent-Administrator-Guide/Cytoo...

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Prevent-Administrator-Guide/Manage-...