App Control: How to Uninstall Agents With 3rd Party Utilities

[#1]

Environment

• App Control Agent: 7.x, 8.x
• Microsoft Windows: All Supported Versions

Objective

To uninstall the App Control agent via 3rd party utilities such as GPO, SCCM, etc.

Resolution

It's strongly recommended to be familiar with both Windows and CB Protection command line arguments before proceeding.

1. Determine the GUID of the CB Protection version currently installed on agent(s):
   • https://community.carbonblack.com/t5/Knowledge-Base/Carbon-Black-Protection-Product-Version-GUIDs/ta...
2. Create a script similar to the below (using the GUID needed).

   @echo off
   
   cd c:\Program Files (x86)\Bit9\Parity Agent
   
   dascli password <GlobalCliPasswordInsertedHere>
   
   dascli tamperprotect 0
   
   dascli allowuninstall 1
   
   msiexec /x {GUIDINSERTEDHERE} /quiet FORCE=1 /l*v C:\manual_uninstall.log

3. Distribute script to the agent(s) being uninstalled
4. Confirm results

Additional Notes

• This document is to be used as a generic guide only. Environmentally specific alterations or additions may need to be added. Please contact Carbon Black CSM for further assistance.
• The brackets {} must exist around the GUID or the command won't work.