Uninstalling the agent/ sensor for Windows

In most cases, there are two different scenarios for uninstalling the agent/ sensor for Windows:-

Scenario 1 - Agent/ sensor is installed and online (installed) in Device Summary page

For this scenario, Contact the ArmourZero team via in-app SOC Ticket. 

Scenario 2 - Agent/ sensor is installed and offline (Not installed) in Device Summary page

For cases where the agent/sensor is installed and offline (not installed) on the Device Summary page, we recommend the following steps to resolve the issue:

1. Uninstall the sensor/agent.
2. Reinstall the sensor/agent.

Additionally, if the endpoint user is not listed in the devices list, you can also follow these troubleshooting steps.

Step 1 - Uninstall the agent/sensor

You may consider trying one of the following methods to uninstall the agent/sensor;

Method 1 - Uninstalling using the Control Panel

Step 1: Open the Windows Control Panel by running it as an administrator.

Step 2: Click on "Uninstall a Program."

Step 3: Locate "CrowdStrike Windows Sensor" and uninstall it. If prompted, provide the maintenance token through the installer. If you need the maintenance key, please ask your Success Manager for assistance.

Method 2 - Uninstalling using the maintenance token

Step 1 - Get the single-use maintenance token needed to uninstall the sensor from the SOC team.
Step 2 - Use this token in this command line script to uninstall the sensor

CsUninstallTool.exe MAINTENANCE_TOKEN=<token> /quiet

Validating the uninstallation

When the sensor has been uninstalled:

• The sensor does not appear in your program list
• The directory C:\Windows\System32\drivers\CrowdStrike is not present
• The registry key HKLM\System\Crowdstrike does not appear in the registry. 

Step 2 - Reinstall the agent/sensor

If the device owner (end-user) still has the onboarding email, they can download a step-by-step guide for setting up ArmourZero protection services before activation.

To access the guide, simply click on this PDF Guide.

If the email is lost, simply resend the onboarding email. To do this, go to the ArmourZero console, hover over the left-side menu, and navigate to Manage > Subscriptions.

Step 1 - Go to the left side menu, under Manage, and select Subscriptions.

Step 2 - Choose the service to which you wish to send the installer download link.

Step 3 - Go to "Actions" and click on the three dots icon. A dropdown will appear.

Step 4 - From the dropdown, select "Send OB Email". A pop-up will appear.

Step 5 - From the pop-up, choose the end user you wish to send the installer download link to.

Step 6 - Click "Send Email".