Uninstalling Cortex XDR

Showing results for 
Show  only  | Search instead for 
Did you mean: 

Uninstalling Cortex XDR

L3 Networker

Hi All,


The customer is trying to uninstall the old agent version as they are not reporting to the console and installing the latest version. 

There are 1000+ machines in the infra and they are planning to do this via a centralized tool. 

Please suggest a feasible way of performing this activity.


Also is there an uninstallation command that can be used in the script?




L4 Transporter

Hi @Shahwaz_Md ,


If you're trying to uninstall from multiple endpoints it may be good to use a python or powershell script launched from a central location.  You should be able to use cytool to help this process. Here's an excerpt from the Tech Docs that you may find helpful.


Uninstall the Cortex XDR Agent for Windows Using Msiexec

Use the following workflow to uninstall the Cortex XDR agent using Msiexec.

  1. Use one of the following options to open a command prompt as an administrator:

    • Select Start  All Programs  Accessories. Then right-click Command prompt and Run as administrator.

    • Select Start. In the Start Search box, type cmd. Then, to open the command prompt as an administrator, press CTRL+ SHIFT+ ENTER.

Run the msiexec command followed by one or more of the following options or properties:

    • /x<installpath>\<installerfilename>.msi—Uninstall a package.

    • /l*v <logpath>\<logfilename>.txt—Log verbose output to a file.

      Uninstall and logging options




Here's a link to the Tech Docs where you can also find additional methods for removing the Cortex XDR Agent.

I hope you find this information helpful.  Have a great day!

  • 1 replies
  • 78 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!