Already a NinjaOne customer? Log in to view more guides and the latest updates.

Uninstalling CrowdStrike Falcon

  • Last Updated April 28, 2026

Topic

This article provides the basic process for removing CrowdStrike Falcon from an endpoint.

Environment

  • Microsoft Windows
  • CrowdStrike Falcon

Description

These uninstall instructions are derived from CrowdStrike's official procedures, which you can access through the Uninstalling the Falcon sensor for Windows (external link - login required). These basic instructions are available for your convenience if you do not have login access to CrowdStrike's website.

We cannot provide support for third-party applications. The steps described are for reference only and may change without notice. Some uninstall procedures require access to CrowdStrike resources. You should perform these steps while you still have access to those resources. If you no longer have access, contact CrowdStrike for assistance.

Prerequisites

Ensure the device that you are removing Crowdstrike Falcon from is using a sensor update policy that has the Uninstall and maintenance protection setting deactivated.

Procedures

You have two options from the command line interface (CLI). You can use the uninstaller package or uninstall using the control panel. We'll describe both of these options in the following sections.

Uninstall via the Microsoft Windows Control Panel

To uninstall the CrowdStrike Falcon sensor for Windows by using the Control Panel, follow these steps

  1. Open the Windows Control Panel as an administrator.
  2. Click Uninstall a program.
  3. Select CrowdStrike Windows Sensor from the list of programs.
  4. Click Uninstall and follow any prompts.

Uninstall via the CLI

You must have Administrator privileges to uninstall the Falcon sensor. To do so via the CLI:

  1. Log in to the Falcon console
  2. Navigate to Support and resources → Resources and tools → Tool Downloads.
  3. Download the uninstall tool:
    • For US-1, locate Falcon Windows Sensor, Uninstall Tool, and click the download icon.
    • For US-2 and EU-1, locate Falcon Host Windows Sensor, Uninstall Tool, and click the download icon.
  4. Save the CsUninstallTool file to your desired location.
  5. In the CLI, navigate to the folder where you downloaded the uninstall tool.
  6. Uninstall the Falcon sensor by entering the command: CsUninstallTool.exe.
You will need a maintenance token if your uninstall protection is still active.

Additional Resources

For more information about CrowdStrike maintenance tokens, refer to Why can I uninstall the Falcon sensor without a maintenance token? (external link - login required).

For more information about uninstalling CrowdStrike Falcon, refer to Uninstalling the Falcon sensor for Windows (external link - login required).

FAQ

Next Steps