FortiSIEM Discussions
adem_netsys
Contributor

Windows Agent Uninstall

Hi guys,

 

Can i remove installed windows agents via siem, i have no connection to windows machines. Is there a command or script for this?

4 REPLIES 4
adem_netsys
Contributor

Anyone knows?

FSM_FTNT
Staff
Staff

There is no way to remotely uninstall the agent from the FortiSIEM GUI.

I'll check for CLI based methods and revert back.

FSM_FTNT
Staff
Staff

Hi,

 

As mentioned, there is no remote way to uninstall from the GUI.

 

We have updated the agent documentation to provide the CLI options to uninstall the agent

https://docs.fortinet.com/document/fortisiem/7.1.1/windows-agent-7-1-x-installation-guide/547950/for...

 

You may be able to invoke the msiexec command remotely on the target system using PowerShell.

adem_netsys

Hi,

As I understand it, we need to connect to the win host machine.