Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: Uninstall a Disconnected Agent (Windows)

App Control: Uninstall a Disconnected Agent (Windows)

Environment

  • App Control Agent: All Supported Versions
  • Microsoft Windows: All Supported Versions

Objective

  • Uninstall a disconnected Agent using an Agent Uninstall Key and the endpoint's MAC Address.

Resolution

Obtain Agent Version and MAC Address:
  1. Login to the Console
  2. Navigate to Assets > Computers.
    • Make note of version displayed in the "Agent Version" column.
  3. Login locally to the device being uninstalled.
  4. Open a command prompt
  5. Type in "ipconfig /all"
    • Make note of the MAC Address
Obtain Uninstall Key: Using the Agent Uninstall Key:
  1. Boot the system into Safe Mode
  2. Go to Start > Run > regedit > click OK
  3. Browse to:
    1. 32-bit endpoints:  HKEY_LOCAL_MACHINE > Software > Bit9 > Parity Agent > ServerSettings 
    2. 64-bit endpoints:  HKEY_LOCAL_MACHINE > Software > Wow6432Node > Bit9 > Parity Agent > ServerSettings
  4. Click Edit > New > String Value
  5. Name the new key (string value):  B9_UNINSTALL_KEY
  6. Set the value to the uninstall key obtained through the tool
  7. Set the registry key B9_HOST_ENFORCEMENT to 80
  8. Exit Regedit
  9. Type the following in an administrative command prompt (to disable service startup)
    sc config parity start= disabled
  10. Reboot to Normal Mode and uinstall the Agent via Add/Remove Programs.

Additional Notes


Related Content


Labels (1)
Was this article helpful? Yes No
34% helpful (1/3)
Article Information
Author:
Creation Date:
‎10-28-2014
Views:
24691
Contributors