Skip to main content

Who is this article for?

Incydr Professional, Enterprise, Horizon, and Gov F2
Incydr Basic, Advanced, and Gov F1

Find your product plan in the Code42 console on the Account menu.

Instructor, no.

Incydr Professional, Enterprise, Horizon, and Gov F2, yes.

Incydr Basic, Advanced, and Gov F1, no.

HOME
GETTING STARTED
RELEASE NOTES
FAQs
APIs
SYSTEM STATUS
Code42 Support

Uninstall the insider risk agent from user devices

Overview

This article explains how to uninstall the insider risk agent from user devices. Uninstalling the insider risk agent deletes all Code42 application and data files from the device.

For Incydr Professional, Enterprise, Horizon, and Gov F2 only
This article applies to Incydr Professional, Enterprise, Horizon, and Gov F2 only. For Incydr Basic, Advanced, and Gov F1, see Uninstall the Code42 app.

Considerations

Uninstalling the insider risk agent removes the Code42 log files. If you are uninstalling as part of a troubleshooting process, retrieve the logs before uninstalling.

Windows

Manual uninstall

To uninstall the insider risk agent from a single device:

  1. Sign in to the Windows device as a user with administrator permissions.
  2. From the Windows menu, select Settings  > Apps > Apps & features.
  3. Select Code42-AAT and select Uninstall.

MDM uninstall

You can also use a mobile device management (MDM) tool like SCCM to remove the app remotely from one or more devices. From your MDM, run the insider risk agent uninstaller with this command:

"C:\Program Files\Code42-AAT\Code42-AAT.exe" /uninstall 

PowerShell uninstall

To use PowerShell to uninstall the insider risk agent, run the uninstaller with this command:

Start-Process -FilePath "C:\Program Files\Code42-AAT\Code42-AAT.exe" -ArgumentList "/uninstall" 

Mac

Manual uninstall

The insider risk agent is installed as a system extension. The primary method Apple supports for removing a system extension is dragging the app to the Trash.

User confirmation required
On Mac devices, uninstalling the insider risk agent prompts the user to confirm the uninstall. This is a security measure implemented by Apple for all macOS system extensions.
  1. In the Finder, go to Applications.
  2. Drag the Code42-AAT icon to the Trash.
  3. When prompted, confirm the deletion.

MDM uninstall

You can also use a mobile device management (MDM) tool like Jamf to remove the app remotely from one or more devices:

macOS Monterey

  1. Configure Code42 as a Removable System Extension in your computer configuration profile.
  2. From your MDM, run the insider risk agent uninstaller with this command:
    • Version 1.7.0 and later: sudo /Applications/Code42-AAT.app/Contents/MacOS/code42-aat-cli --uninstall
    • Version 1.6.0 - 1.6.2: sudo /Applications/Code42-AAT.app/code42-aat --uninstall
    • Version 1.5.1 and earlier: sudo /Library/Application\ Support/Code42-AAT/code42ctl uninstall

macOS Big Sur

Requires insider risk agent version 1.4.0 or later

  1. From your MDM, remove the Code42 computer configuration profile.
  2. From your MDM, run the insider risk agent uninstaller with this command:
    • Version 1.7.0 and later: sudo /Applications/Code42-AAT.app/Contents/MacOS/code42-aat-cli --uninstall
    • Version 1.6.0 - 1.6.2: sudo /Applications/Code42-AAT.app/code42-aat --uninstall
    • Version 1.5.1 and earlier: sudo /Library/Application\ Support/Code42-AAT/code42ctl uninstall

This method only works if the device is not restarted between steps. If the device does restart between steps 1 and 2, you must manually run the uninstaller or drag the app to the Trash as described in the Manual uninstall steps above.

  • Was this article helpful?