"

How to remove Netwrix agents from monitored computers/servers/DCs?

Last review: Jan 01, 2013
https://kb.netwrix.com/705
Copy Article URL Copied

How do I remove Netwrix Lightweight agents from remote computers/servers/DCs?


NOTE: The procedures below must be performed on each of the monitored machines/servers/DCs.

I. To uninstall Mailbox access auditing agent:

  1. Log onto the Exchange server;
  2. Navigate to Start –> Run and type “cmd”.
  3. Type “cd %windir% \NwAgentShare” and press Enter.
  4. Type “sc delete nwagentsvc ” and press Enter.
  5. After the unregistration procedure finishes, type “del *.*”, press Enter and confirm the deletion.
  6. Type “cd %windir%\NetWrix\NetWrix Non-owner Mailbox Access Agent ” and press Enter.
  7. Type “sc delete NetWrix Non-owner Mailbox Access Agent” and press Enter.
  8. After the unregistration procedure finishes, type “del *.*”, press Enter and confirm the deletion.

II. To uninstall Active Directory auditing agent:

  1. Log on a DC.
  2. Navigate to Start –> Run and type “cmd”.
  3. Type “cd %windir%\ADCR_agent” and press Enter.
  4. Type “sc delete adcrsvc” and press Enter.
  5. After the unregistration procedure finishes, type “del *.*”, press Enter and confirm the deletion.

III. To uninstall File Server auditing and some other targeted systems agent

  1. Log onto the target machine or server monitored by Netwrix Auditor for File Servers.
  2. Navigate to Start –> Run and type “cmd”.
  3. Type “cd %windir%\NwAgentShare” and press Enter.
  4. Type “sc delete nwagentsvc ” and press Enter.
  5. After the unregistration procedure finishes, type “del *.*”, press Enter and confirm the deletion.
  6. Type “cd %windir%\NetWrix\NetWrix File Server Change Reporter Agent” and press Enter.
  7. Type “sc delete NetWrix File Server Change Reporter Agent” and press Enter.
  8. After the unregistration procedure finishes, type “del *.*”, press Enter and confirm the deletion.

IV. To uninstall Netwrix Auditor for Windows Server agent use Programs and features list

Go Up