Subscribe to the Taegis™ XDR Documentation RSS Feed at .

Learn more about RSS readers or RSS browser extensions.

Taegis™ Agent Uninstall

integrations endpoints edr taegis agent secureworks

To uninstall the Taegis™ XDR Endpoint Agent, follow the steps relevant to your OS.

Windows Uninstall

Uninstall the agent via Taegis™ XDR, command line, or Control Panel. An uninstall removes all Taegis™ Endpoint Agent binaries and registry entries.

Uninstall via XDR

  1. From the XDR left-hand side navigation, select Endpoint Agents → Summary.
  2. Select the Hostname entry for the endpoint you would like to uninstall the agent from.
  3. Select the three dot Actions icon from the side drawer summary view, or open the detailed view and select the Actions menu.

Uninstall Agent

Uninstall Agent

  1. Choose Uninstall Agent. The agent uninstalls on the selected endpoint, with all agent binaries and registry entries removed, except for an uninstall log located at %PROGRAMDATA%\SecureWorks\TaegisAgent\TaegisAgentUninstall.txt.


To perform this action for multiple Windows Taegis™ Endpoint Agents at once, see Uninstall Taegis™ Agents

Uninstall via Command Line Using MSI Installer

At an administrator command line prompt, use the following command:

msiexec /x <path> /quiet /norestart /l*vx TaegisAgentUninstall.txt

We recommend you add the /quiet flag for a quiet uninstallation, the /norestart flag to prevent the endpoint from restarting, and the /l*vx flag to enable logging for all uninstall actions.

All Taegis™ Endpoint Agent binaries and registry entries are removed with an uninstall log located in the TaegisAgentUninstall.txt file.

Uninstall via Control Panel

  1. From the Windows Control Panel, go to Programs and Features, select Taegis Agent, and then choose Uninstall.
  2. Confirm the action, and then select Yes from the User Account Control dialog, entering admin credentials, if prompted.
  3. The agent uninstalls with all agent binaries and registry values removed from the endpoint and no uninstall log created.

macOS Uninstall


The Uninstall Agent action in Taegis™ XDR is not supported for remotely uninstalling the Taegis™ macOS agent at this time. The Taegis™ macOS agent leverages system extensions that require an admin password that cannot be passed from Taegis™ XDR to be disabled so the agent can be uninstalled. To uninstall the Taegis™ macOS agent, follow these macOS Uninstall steps.

  1. Ensure that the Taegis™ XDR Endpoint Agent is not running on the system. From the dock, right-click the Taegis™ icon, then select Quit.

Quit App

Quit App

  1. From the Applications folder, locate SecureworksTaegis, right-click, and select Move to Trash to uninstall.

Move to Trash

Move to Trash

  1. A dialog displays a message that the system extensions will also be removed. Select Continue.

Continue to Remove Extensions

Continue to Remove Extensions

  1. The Taegis™ XDR Endpoint Agent has been successfully uninstalled.

Linux Uninstall

Run the following command:

yum remove taegis-agent.x86_64 -y

apt remove taegis-agent -y


On this page: