Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: How to Uninstall an Agent Using the Uninstall Tool

App Control: How to Uninstall an Agent Using the Uninstall Tool


  • App Control Agent: All Supported Versions
  • Microsoft Windows: All Supported Versions


This document describes how to uninstall an Agent using the Uninstall Utility.


The latest Agent Uninstall Tool version is Please avoid using any other version of the tool.
  • The Global CLI Password is only required for disabling the agent's Tamper Protection.
  • If the agent's Tamper Protection has been disabled already then the global password can be omitted
  • If the Agent is in a Disconnected state, or you are unable to otherwise authenticate with the Agent, please first attempt the Safe Mode Removal Method.
  • The Agent Uninstall Tool should be considered a "Best Possible Attempt" utility when all other methods of removal fail.
To obtain & utilize the Agent Uninstall Utility:
  1. Attempt the Safe Mode Removal Method and collect the failed Agent Uninstall Log.
  2. Open a case with Technical Support and provide the failed Agent Uninstall Log for review.
  3. Once confirmed the utility is required, the latest version will be provided.
  4. Save the utility to a directory outside the Agent directory (Example: C:\Temp)
  5. The utility must be executed from an administrator-level command line (it can be executed remotely via Psexec or Powershell)
  6. Run the tool using the following command:
    AgentUninstallUtility -password GlobalCLIPassword -logfile "%userprofile%\Desktop\Uninstall.log" -uninstall
  7. System reboot may not be needed unless there were errors removing the agent's files and registry keys (check the uninstall log)
  8. If some of the agent's files or keys were not removed during the first run, reboot the System and run the tool again

Additional Notes

  • To run the Agent Uninstall Tool in Test Mode, remove the "-uninstall" option from the command:
    AgentUninstallUtility -password GlobalCLIPassword -logfile "%userprofile%\Desktop\UninstallUtility.log"
  • It may be necessary to run the Microsoft Troubleshooter to remove all references to the Bit9 Agent or App Control Agent from the Windows Installer Service.
  • In some situations where the Agent has been patched and/or upgraded from previous versions, this tool may not remove all versions of the older Agent. Manual Registry Cleanup may be required.
  • The -password option is required to fully disable Tamper Protection.
  • The -uninstall option is required to do the uninstall.
  • The latest Agent Uninstall Utility is version

Related Content

Labels (1)
Was this article helpful? Yes No
34% helpful (1/3)
Article Information
Creation Date: