Uninstalling the Windows Agent
Last updated: December 17, 2025
When a Windows machine is decommissioned, repurposed, or no longer requires scanning, the Cyrisma Agent must be removed both from the device and from the Cyrisma Web Platform. This ensures that the Cyrisma environment remains clean, accurate, and free of stale agent or target entries.
This article explains how to:
Uninstall the Cyrisma Agent from a Windows machine
Remove the agent configuration from the Cyrisma Platform
Remove target configurations when machines no longer exist
Understand how scan data is handled after deletion
1. Important Considerations
Before removing an agent, note the following:
Uninstalling the agent locally does not remove its configuration from the Cyrisma Web Platform.
Removing a target or agent from the platform does not delete scan data.
If the agent host is still online and checking in:
Deleting the agent from the platform will trigger the agent to self-uninstall during its next check-in (typically within 5 minutes unless a scan is running).
If the machine is offline, repurposed, or decommissioned:
You must remove the agent/target configuration manually from the platform.
2. Uninstalling the Cyrisma Agent from Windows
You may uninstall the Windows agent using any of the following methods.
Method 1: Manual Uninstallation (File Explorer)
Open File Explorer and navigate to:
C:\CYRISMA_Agent\Locate:
unins000.exeDouble-click to launch the uninstaller and follow on-screen prompts.
Method 2: Silent Uninstallation (Script or RMM)
To silently uninstall the agent:
C:\CYRISMA_Agent\unins000.exe /verysilent
This method is ideal for:
RMM tool deployments
Automated uninstall workflows
Mass removal across many endpoints
Method 3: Uninstalling via Cyrisma Web Interface
If the Windows machine is still online and able to check in, Cyrisma can instruct the agent to uninstall itself.
Steps:
Log in to Cyrisma.
Go to Admin > Scan Agents.
Under Update Existing Agent, search for the Windows agent by hostname.
Click Submit to open the agent configuration.
At the bottom of the page, click Delete.
Once deleted:
The agent will automatically uninstall itself on its next check-in.
The agent entry will be removed from the platform interface.
3. Removing Target & Agent Configurations From the Cyrisma Platform
Depending on your situation, you may need to delete:
Only the agent, or
Both target and agent configurations
Option A: Remove Both Target and Agent Configurations
Use this method when a machine is:
Decommissioned
Repurposed
Permanently offline
No longer part of your environment
Steps:
Log in to Cyrisma.
Navigate to Admin > Targets.
Search for the machine's target entry.
Click Edit.
Click Delete and submit.
This removes:
The target configuration
The agent configuration
Scan data remains in the system for historical accuracy. Deleted targets will appear as:
example_d_YYYYMMDDHHMM
Option B: Remove Only the Agent Configuration
Use when:
You want to keep the target configuration
Only the agent needs replacement or cleanup
The machine will continue to exist as a managed asset
Steps:
Go to Admin > Scan Agents.
Click Update Existing Agent.
Search for the agent by name.
Click Submit to open the agent settings.
Click Delete and submit.
If the agent is still checking in, it will self-uninstall from the Windows machine.
4. Removing Configurations for Decommissioned or Repurposed Machines
If the system has already been wiped, retired, or re-imaged:
Go to Admin > Targets.
Search for the old machine entry.
Click Delete.
This removes the stale target and agent configuration from Cyrisma.
Since the machine is no longer online, no uninstall action will occur on the device.
5. Scan Data Retention (Important)
Cyrims does not automatically delete scan data when you delete a target or agent configuration.
Historical scan data remains available.
Deleted systems appear with
_d_YYYYMMDDHHMMidentifiers.This preserves audit trails and reporting accuracy.
6. Summary
The table below clarifies the correct removal method depending on your scenario:
Scenario | Local Uninstall? | Delete Agent? | Delete Target? | Result |
Machine still online | Optional | Yes | Optional | Agent self-uninstalls; platform entry removed |
Machine repurposed | Yes | Optional | Yes | Old entries removed; scan data retained |
Machine decommissioned | Not possible | Optional | Yes | Platform cleaned up; no device action |
Replacing agent | Yes or via delete | Yes | No | Target preserved; agent replaced |
Conclusion
Removing a Windows CYRISMA Agent involves both uninstalling the software (if the device is still active) and cleaning up its configuration in the CYRISMA Web Platform. Using the correct removal method ensures your agent inventory, target lists, and scan data remain accurate and free of clutter.