PSC: How to Uninstall Windows Sensors using GPO

Products

Carbon Black Cloud Endpoint Standard (formerly Cb Defense) Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

How to Uninstall Windows PSC Sensors using GPO

Environment

CB Defense PSC Console: All Versions
CB Defense PSC Sensor: All Versions
Microsoft Windows: All Supported Versions
Group Policy Object Editor

Resolution

WARNING: Sensor does not support uninstall using GPO if "Require code to uninstall sensor" is enabled in the policy. See https://community.carbonblack.com/t5/Knowledge-Base/PSC-Sensor-uninstalled-without-de-registration-code/ta-p/84736 for details

If "Require code to uninstall sensor" is disabled, please choose one or both applicable uninstall option(s):

Option 1 (Recommended)

Select Start > Administrative Tools > Group Policy Management and select the Group Policy Object (GPO).
Click Computer Configuration > Policies > Software Settings > Software Installation.
Right-click the CB Defense Sensor application, select All Tasks > Remove...
In the Remove Software dialog box, select Immediately uninstall the software from users and computers. This option specifies that the application should be removed the next time a user logs on or restarts the computer

Option 2 (Not Recommended)

Select Start > Administrative Tools > Group Policy Management and select the Group Policy Object (GPO).
Right-click the CB Defense Sensor application, and then click Properties.
In the Properties dialog box for the application, select the Deployment tab.
Under Deployment options, select Uninstall this application when it falls out of the scope of management. Select this option to remove the application when users log on, or when computers start up, if they have moved to a site, domain, or organizational unit for which the application is not deployed.

Additional Information

If the option Uninstall this application when it falls out of the scope of management has been checked on the deployment tab of the Group Policy software installation options, it is important that the sensor being upgraded is disconnected from the Group Policy and that this change is propagated to all computers prior to deleting a Group Policy. If the Group Policy is deleted before the change to disconnect the sensor is fully propagated, the Group Policy will attempt to uninstall sensors.
Sensors installed through Group Policy can be uninstalled through alternate methods like Add/Remove Programs or the PSC console. To do this, the sensors must be removed from Group Policy in the outlined in the Disconnecting sensors from the Group instructions of https://community.carbonblack.com/t5/Knowledge-Base/Cb-Defense-How-to-Configure-GPO-to-Allow-Sensor-Upgrades/ta-p/40766