Uninstall TDR Host Sensors

When you log in to the Threat Detection and Response web UI as a user with Operator credentials, you can uninstall a Host Sensor from any host. If you manually uninstall a Host Sensor from a host. you can also clear the sensor status in your TDR account so the host does not continue to use a Host Sensor license.

You must manually remove Host Sensor properties files before you install a Host Sensor for another TDR account. For more information, see Manually Remove Host Sensor Properties Files.

If a host is a member of a Device Group, you can also uninstall Host Sensors or clear the Host Sensor status from the Groups page. For more information, see Manage TDR Groups.

Uninstall a Host Sensor

To remove a Host Sensor from a single host:

  1. Log in to the TDR web UI as a user with Operator credentials.
  2. Select Devices > Hosts.
  3. In the Install State column, click .

To uninstall a Host Sensor from more than one host:

  1. Log in to the TDR web UI as a user with Operator credentials.
  2. Select Devices > Hosts.
  3. Select the check box for one or more hosts.
  4. From the Actions drop-down list, select Remove Sensor.
    If Threat Detection and Response can communicate with the host, the Host Sensor is uninstalled.

If a Host Sensor was manually installed, the host is removed from the Hosts list after you uninstall the Host Sensor. If a host was added by AD Helper, the host remains in the Hosts list after you uninstall the Host Sensor, and the Install State for that host changes to Uninstalled.

Manually Uninstall a Host Sensor

You can also manually uninstall a Host Sensor from the host. The name of the installed Host Sensor is Threat Detection and Response.

To manually uninstall a Host Sensor from a Windows computer:

  1. On the computer where the Host Sensor is installed, open Windows Control Panel > Programs and Features.
  2. Find the Threat Detection and Response application.
  3. Right click the application and select Uninstall.
    The Host Sensor is uninstalled from the Windows host.

After you manually uninstall a Host Sensor, clear the Host Sensor status in the Threat Detection and Response web UI so that host does not continue to use a Host Sensor license.

  1. Log in to the TDR web UI as a user with Operator credentials.
  2. Select Devices > Hosts.
  3. Select the host from which you uninstalled the Host Sensor.
  4. From the Actions drop-down list, select Acknowledge Manually Removed.

Manually Remove Host Sensor Properties Files

When you uninstall a Host Sensor from a host computer, the properties files that were created by the Host Sensor are not automatically removed. The Host Sensor properties files contain the Account UUID and Controller Address used by the Host Sensor. Before you install a new Host Sensor for a different TDR account, you must manually remove the Host Sensor properties files that were created by the previous Host Sensor.

To remove the Host Sensor properties files from the host computer, delete this folder:

c:\program files(x86)\watchguard\Threat Detection and Response\

It is not necessary to manually remove Host Sensor properties files before you install a Host Sensor again for the same TDR account.

See Also

TDR Host Sensor Automated Installation

Manage TDR Hosts and Host Sensors

Give Us Feedback     Get Support     All Product Documentation     Technical Search