¶ Individual Machine Removal
- Login to the CS Console
- Click the burger icon in the upper left
- Host setup and management > Manage endpoints > Host management updated
- Click on the host in question to expand the host options side panel
- Click Actions > Reveal maintenance token
- Enter a reason or just click Reveal token
- Copy the token
- Open Control Panel > Programs and Features
- Click on CrowdStrike Windows Sensor > Uninstall
- Enter the maintenance token > click Uninstall
- It can take up to 10 minutes for CrowdStrike to fully uninstall from the device
¶ Group of Machines Removal
If you are just uninstalling CrowdStrike from a large group of devices, but not all devices, you should contact your Falcon Complete Team before proceeding as this requires adjustments to the Sensor Update policies.
- Login to the CS Console
- Click the burger icon in the upper left
- Host setup and management > Deploy > Sensor update policies
- Click +Create new policy > Enter a name > Enter a description > click Create *Note you will need to do this for every Operating System
- Toggle on Bulk maintenance mode > click Save > click Confirm
- Toggling off the Uninstall and Maintenance Protection won't actually allow you to remove CS without a token, there are several other Security & Agent polices that need to be set in order to remove CS without the need of a maintenance token.
- Click Assigned Host Groups > Click +Add groups to policy
- Assign the policy to the host group(s) that CrowdStrike will be removed from
- Click Settings > Click Reveal Token > Click Reveal token again > Copy the Policy Maintenance Token
- On each of the machines Open Control Panel > Programs and Features
- Click on CrowdStrike Windows Sensor > Uninstall
- Enter the bulk maintenance token > click Uninstall
- It can take up to 10 minutes for CrowdStrike to fully uninstall from the device