Uninstalling Cortex XDR

[Shahwaz_Md]

Hi All,

The customer is trying to uninstall the old agent version as they are not reporting to the console and installing the latest version. 

There are 1000+ machines in the infra and they are planning to do this via a centralized tool. 

Please suggest a feasible way of performing this activity.

Also is there an uninstallation command that can be used in the script?

Thanks

[anlynch]

Hi @Shahwaz_Md ,

If you're trying to uninstall from multiple endpoints it may be good to use a python or powershell script launched from a central location.  You should be able to use cytool to help this process. Here's an excerpt from the Tech Docs that you may find helpful.

Uninstall the Cortex XDR Agent for Windows Using Msiexec

Use the following workflow to uninstall the Cortex XDR agent using Msiexec.

1. Use one of the following options to open a command prompt as an administrator:

   • Select Start → All Programs → Accessories. Then right-click Command prompt and Run as administrator.

   • Select Start. In the Start Search box, type cmd. Then, to open the command prompt as an administrator, press CTRL+ SHIFT+ ENTER.

Run the msiexec command followed by one or more of the following options or properties:

• • /x<installpath>\<installerfilename>.msi—Uninstall a package.

  • /l*v <logpath>\<logfilename>.txt—Log verbose output to a file.

    Uninstall and logging options

Here's a link to the Tech Docs where you can also find additional methods for removing the Cortex XDR Agent.

I hope you find this information helpful.  Have a great day!