Uninstall Arctic Wolf Agent from macOS using Jamf Pro

Note:

When Arctic Wolf® Agent is uninstalled, devices and associated risks are removed from the MDR Dashboard and Risk Dashboard.

You can uninstall Agent from multiple endpoints in your organization using Jamf Pro®.

Create an uninstall script in Jamf Pro

  1. In Jamf Pro, go to Settings > Computer management.
  2. Click Script, and then click New.
  3. In the script editor, enter these commands:
    Note: These commands run the Agent uninstaller and removes the Agent folders.
    CODE
    #!/bin/bash
    sudo ./Library/ArcticWolfNetworks/Agent/uninstall.sh
    sleep 20
    sudo rm -rf /Library/ArcticWolfNetworks/Agent
  4. Click Save.

Configure an uninstall Jamf Pro computer policy

Set a policy to uninstall Agent on macOS using Jamf Pro. If the policy is applied to the client device and the device meets the criteria that you configure, the package will uninstall the next time that the user checks in according to your policy.

Note:

Your configuration choices might be different than those outlined in this document. Make configuration changes based on the needs of your environment.

  1. In Jamf Pro, go to Computers > Policies.
  2. Click New.
  3. Under Options, click General, and then configure these settings:
    • Display Name — Enter a name for the script. For example, Uninstall Arctic Wolf Agent.
    • Category — Select a category. For example, Utilities.
    • Trigger — Select Recurring Check-in. Arctic Wolf recommends this setting, but adjust for your environment.
    • Execution Frequency — Select Once per computer. Arctic Wolf recommends this setting, but adjust for your environment.
  4. Under Options, click Scripts, and then add the Agent uninstall script:
    1. Click Configure.
    2. In the row with the Agent uninstall script, click Add.
      A page with additional script options opens.
    3. Click Save.

Configure the computer target scope

Under Scope, enter the target computers to uninstall Agent:
  1. Under Target Computers, select Specific Computers.
    Tip: You can use Smart Groups to define a dynamic list of target computers.
  2. Click Add.
  3. Locate the target computers in the list to uninstall Agent, and then click Add for each target computer.
    Tip: Use the Filter Results field to filter for the target computers.
  4. After all the target computers are added to the scope, click Done.
  5. Click Save.
During check-in, Agent is uninstalled from the computers you defined in the Scope setting.