Views:

Use the uninstall tool to remove agents from Windows endpoints.

Trend Micro recommends using an endpoint management software like Microsoft Endpoint Configuration Manager (formerly System Center Configuration Manager (SCCM)) to deploy the uninstall tool. If you do not have access to an endpoint management software, you can run the tool manually from the endpoint using Command Prompt.

Procedure

  1. On the Trend Vision One console, go to Endpoint Security → Endpoint Inventory.
  2. Click Agent Installer.
  3. Click the download the uninstall tool link at the bottom of the Agent Installer screen.
    Note
    Note
    If you do not see the link, you might not have permission to perform this action. Contact your system administrator.
  4. In the Download Uninstall Tool screen, locate Windows (32-bit, 64-bit) and click the Download tool button.
    Note
    Note
    The downloaded uninstall tool expires after seven days.
  5. Deploy the uninstall tool package to the target Windows endpoint and unzip the package.
  6. Run the V1ESUninstallTool.exe with the target product parameter.
    If you are manually uninstalling the tool from the endpoint, use Command Prompt to run the tool with the parameter.
    Target Product
    Parameter
    Command
    Description
    Standard Endpoint Protection
    --sep
    V1ESUninstallTool.exe --sep
    Only uninstalls the Standard Endpoint Protection agent
    Server & Workload Protection
    --swp
    V1ESUninstallTool.exe --swp
    Only uninstalls the Server & Workload Protection agent
    Server & Workload Protection with self-protection password enabled
    --swp --swp-password=<self-protection password>
    V1ESUninstallTool.exe --swp --swp-password=<self-protection password>
    Only uninstalls the Server & Workload Protection agent
    If you disable the self-protection password before uninstalling, you do not need to include the password parameter.
    Uninstall all
    (No parameter)
    V1ESUninstallTool.exe
    Uninstalls the Trend Vision One agent and all related components
    The agent is uninstalled from the endpoint. Endpoint Inventory might take some time to update the information. Some endpoints might require you to manually update the endpoint lists. For more information, see Cleaning Up Uninstalled Agents.