Already a NinjaOne customer? Log in to view more guides and the latest updates.

Uninstalling the SentinelOne Agent

Topic

This article explains how to uninstall the SentinelOne agent from an endpoint.

Environment

  • Microsoft Windows
  • SentinelOne

Description

These uninstall instructions are derived from SentinelOne's official procedures, which you can access through the SentinelOne Singularity Operations Center (external link - login required). These basic instructions are available for your convenience if you do not have login access to SentinelOne's website.

We cannot provide support for third-party applications. The steps described are for reference only and may change without notice. Some uninstall procedures require access to SentinelOne resources. You should perform these steps while you still have access to those resources. If you no longer have access, contact SentinelOne for assistance.

Prerequisites

Before you can remove the SentinelOne agent, you'll need to deactivate the Anti-Tamper setting in SentinelOne Agent → Security Settings in the SentinelOne Management Console.

Figure 1: Security Settings (click to enlarge)

Uninstalling SentinelOne from the Endpoint

To uninstall SentinelOne, you will need to manually remove it from the endpoint locally by performing the following steps:

  1. Download SentinelOneInstaller.exe from the SentinelOne Management Console to the endpoint.
  2. Open a command prompt with administrator-level privileges on the device.
  3. Navigate to the directory where you downloaded the SentinelOneInstaller.exe file.
  4. Run the following command after the name of the executable file on the endpoint: SentinelOneInstaller.exe -c
  5. Reboot the device.
  6. The SentinelOne software should no longer be present on the endpoint. If the preceding workflow was unsuccessful, proceed to the Uninstalling in Safe Mode section of this article for alternate removal steps.

Uninstalling in Windows Safe Mode

To uninstall the SentinelOne agent in safe mode, follow these steps:

  1. If you have not already done so, download SentinelOneInstaller.exe from the SentinelOne Management Console to the endpoint.
  2. Boot the endpoint device into safe mode.
  3. Open a command prompt with administrator-level privileges on the device.
  4. From the command prompt, navigate to where you downloaded the SentinelOneInstaller.exe file.
  5. Run the command: SentinelOneInstaller.exe -c

    SentinelOneInstaller_windows_64bit_v22_1_5_11025.exe -c
  6. Wait for the uninstall to complete.
  7. Reboot the endpoint into normal mode.

Additional Resources

For more in-depth information about uninstalling SentinelOne, refer to SentinelOne Singularity Operations Center (external link - login required).

FAQ

Next Steps