agent uninstallation 5

Elias_Perez Lv1Posted Aug-25-2025 22:50

I have a problem with EPP. The client told me that when installing an agent he had another antivirus but he installed Sangfor correctly and then he manually uninstalled the other antivirus but the endpoint with the agent installed does not appear in the console and he cannot uninstall the Sangfor agent either. He already tried with the console password but it does not validate.

Newbie337989 has solved this question and earned 25 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins, 5 coins of bounty and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Try these options:
1. Check Agent Registration
- On the endpoint, open Services (services.msc) and confirm Sangfor EPP Agent service is running.
- If not, restart it and try forcing a connection:

cd "C:\Program Files\Sangfor\EPP\"
AgentCtrl.exe -r

- This re-registers the agent with the console.
- Check if the device now appears in the EPP Console > Endpoint List.

2. Uninstall Using the Correct Password
- The EPP agent requires the console-set uninstall password (configured in EPP Policy).
- If the agent cannot validate (since it’s not showing in the console), it often rejects the password.

- Try default password if not changed (some Sangfor deployments keep 123456 as the default).
- If the customer changed it and forgot, you’ll need to reset the uninstall password in EPP console policy > then push the update once the agent reconnects.

3. Force Uninstall (Last Resort)
- If the agent is completely broken and won’t reconnect:
- Use the Sangfor Agent Removal Tool (only available from Sangfor Support).

Is this answer helpful?
Newbie517762 Lv5Posted Aug-26-2025 09:14
  
HiHi,

HiHi,

1. I recommend uninstalling it using the MGR or on the client's PC.
Or
2. To uninstall the Endpoint Security Protect agent on the PC, pls locate the file "uninst.exe" in the directory "C:\Program Files\SF\EDR\agent". Then, enter the uninstall password obtained from the Sangfor Endpoint Secure admin.
Newbie337989 Lv2Posted Aug-26-2025 10:34
  
Try these options:
1. Check Agent Registration
- On the endpoint, open Services (services.msc) and confirm Sangfor EPP Agent service is running.
- If not, restart it and try forcing a connection:

cd "C:\Program Files\Sangfor\EPP\"
AgentCtrl.exe -r

- This re-registers the agent with the console.
- Check if the device now appears in the EPP Console > Endpoint List.

2. Uninstall Using the Correct Password
- The EPP agent requires the console-set uninstall password (configured in EPP Policy).
- If the agent cannot validate (since it’s not showing in the console), it often rejects the password.

- Try default password if not changed (some Sangfor deployments keep 123456 as the default).
- If the customer changed it and forgot, you’ll need to reset the uninstall password in EPP console policy > then push the update once the agent reconnects.

3. Force Uninstall (Last Resort)
- If the agent is completely broken and won’t reconnect:
- Use the Sangfor Agent Removal Tool (only available from Sangfor Support).

Viktor Lv1Posted Aug-29-2025 14:11
  
Last edited by Viktor Aug-29-2025 16:19.

You have to check whether that version of the anti-virus that must be uninstalled is supported by the auto-uninstallation feature of our EPP. I have encountered this problem not too long ago and I later found out that despite of having the auto-uninstallation feature, we still have a lot of other versions that are not supported.

I Can Help:

Change

Moderator on This Board

2
1
0

Started Topics

Followers

Follow

1
1
0

Started Topics

Followers

Follow

908
182
94

Started Topics

Followers

Follow

Trending Topics

Board Leaders