Uninstall agent rom MacOS

cancel
Showing results for 
Search instead for 
Did you mean: 

Uninstall agent rom MacOS

L2 Linker

Hello,

 

We want to uninstall an agent from MacOS, but we do not have the admin password. And we can't reset the password because the tenant was deleted it. So the agent does not have administration from web console.

 

I try with "Passowrd1", it doesn't work.

 

Does someone know how to uninstall it? I know that for Windows, there is a "special cleaner" to delete the agent. But for MacOS, I don't know.

 

Regards, 

1 ACCEPTED SOLUTION

Accepted Solutions

L2 Linker

Hello, @gjenkins 

 

Thanks for your answer. I know that has been past some months. What you said is correct. There is no cleaner for macOS. But, if you open a case, the TAC engineers will help with a script.

 

It is important to underline, for the community, that these delete tools are not public. In order to don't allow final users to uninstall the agent, without the right company permissions.

 

Please, do not share these Cortex XDR delete tools and scripts on public websites.

View solution in original post

2 REPLIES 2

L4 Transporter

Hi @iscott,

 

Unfortunately, given that you don't have the admin or uninstall passwords or a valid connection to the XDR tenant from the endpoint to initiate the uninstall from there, the best next step would be a factory reset or a reimaging of the endpoint.  Unlike Windows, the MacOS Cortex XDR Agent does not have a cleaner. It does have an uninstaller builtin, but you would need the uninstall password for that, so I could only offer a factory reset in this case.

--gjenkins

L2 Linker

Hello, @gjenkins 

 

Thanks for your answer. I know that has been past some months. What you said is correct. There is no cleaner for macOS. But, if you open a case, the TAC engineers will help with a script.

 

It is important to underline, for the community, that these delete tools are not public. In order to don't allow final users to uninstall the agent, without the right company permissions.

 

Please, do not share these Cortex XDR delete tools and scripts on public websites.

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!