Client Uninstallation & Removal Guide

1. Overview

The endpoint client includes an optional security feature called Uninstall Protection. When toggled ON in the web dashboard, regular end users cannot delete or remove the software from local Windows device settings, preventing unauthorized tampering or bypass of enterprise data leakage prevention policies.

To uninstall a protected client:

1. An administrator must log into the web console, locate the target device on the Home Overview page, open its Details panel, and disable the Uninstall Protection toggle remotely.

2. After the policy syncs to the endpoint, standard uninstallation methods will function normally.

For devices without Uninstall Protection enabled, users or IT staff can remove the client via standard Windows Programs menu or silent MSI commands without dashboard adjustments. This guide applies to both EXE-installed and AD/MSI mass-deployed clients.

2. Pre-Uninstall Requirement: Disable Uninstall Protection (If Enabled)

If the target device has Uninstall Protection active, local uninstall attempts will be blocked. Follow these web console steps to lift the restriction remotely:

1. Navigate to the web management dashboard login page: https://privatedlp.com/dashboard/login

2. Sign in using the administrator Google account with full device management permissions.

3. On the default Home Overview page, locate the Device List table containing all registered endpoints.

4. Find the target workstation entry by Device Name or MAC Address, then click the blue Details button on the right side of the row.

5. A pop-up panel titled [Device Name] Policy Configuration Overview will load.

6. Locate the Uninstall Protection toggle switch under the Basic Information section.

7. Toggle the switch to the OFF position.

8. Click the blue Save & Apply button at the top-right of the panel to push the updated policy to the endpoint.

9. Wait 1–2 minutes for the client device to receive the new policy via heartbeat synchronization. Once synced, uninstall restrictions are lifted immediately.

Note: You can re-enable Uninstall Protection at any time after removal is complete by repeating this workflow and flipping the toggle back ON.

3. Uninstallation Workflow Options

3.1 Manual Uninstall via Windows Settings (EXE or MSI Clients)

Use this method for single-device removal after Uninstall Protection has been disabled:

1. On the target Windows device, close the USB Disk Security / PrivateDLP client software completely.

2. Open Windows Settings > Apps > Installed Apps (Windows 10/11) or Control Panel > Programs and Features (older Windows Server builds).

3. Locate the software entry matching your product edition: USB Disk Security or PrivateDLP.

4. Click Uninstall, then follow the on-screen wizard prompts to confirm removal.

5. Once the wizard completes, restart the workstation to clear residual background client services.

3.2 Silent Command-Line Uninstall (For MSI Deployed Clients)

IT administrators can perform unattended, scripted removal via elevated Command Prompt or PowerShell for bulk MSI rollouts:

1. Launch Command Prompt / PowerShell as local Administrator.

2. Retrieve the MSI Product Code (or use the original MSI installer file for uninstall trigger):

   cmd

   msiexec /x "\\domain-share\software\PrivateDLP_Client.msi" /qn
   

   • /x = Trigger uninstall

   • /qn = Fully silent mode with no user interface popups

3. Wait for the command execution to finish, then reboot the endpoint to finalize cleanup.

3.3 Active Directory GPO Removal for Mass Domain Uninstall

For fleet-wide removal of AD-deployed MSI clients:

1. Open Group Policy Management Console (GPMC) on your domain controller.

2. Edit the existing client deployment GPO linked to your target OU.

3. Navigate to Computer Configuration > Policies > Software Settings > Software installation.

4. Right-click the client MSI package and select All Tasks > Remove.

5. Choose the removal method:

   • Immediately uninstall the software from users and computers: Removes client on next device restart.

6. Save GPO changes and run gpupdate /force /boot on target endpoints to apply the removal policy.

4. Post-Uninstall Verification & Cleanup

After completing removal, confirm the client has been fully erased:

1. Local Device Check

   • Reopen Installed Apps / Programs and Features to confirm the software no longer appears in the list.

   • Open services.msc and verify the client background service is no longer running or listed.

2. Web Dashboard Cleanup

   • Return to the Home Overview Device List in the admin console.

   • The uninstalled device will show an Offline status after missing consecutive heartbeats. You may delete the device entry manually from the console to clean up the inventory.

3. Optional Residual File Cleanup

   If leftover folders remain, manually delete the default install directory (typically C:\Program Files\USB Disk Security or C:\Program Files\PrivateDLP) with administrator privileges.

5. Common Troubleshooting

5.1 Uninstall button greyed out / removal blocked locally

• Root Cause: Uninstall Protection is still enabled for the device in the web dashboard.

• Resolution: Complete Section 2 steps to disable the toggle, save policy, and wait for endpoint sync before retrying uninstall.

5.2 Device still visible online in dashboard after uninstall

• The client sends final offline status only after service shutdown. Restart the workstation to stop heartbeat transmission, then refresh the dashboard device list.

5.3 Silent MSI uninstall command returns failure error

• Confirm the MSI file path is a valid UNC share accessible by the device, and run the terminal session with full local administrator rights.

• Double-check that Uninstall Protection was disabled remotely before executing the removal command.

5.4 GPO software removal does not trigger on endpoints

• Force a group policy refresh with gpupdate /force /boot and restart the target workstation to apply the uninstall policy.

• Verify the GPO is correctly linked to the OU containing the device’s computer account.

6. Best Practices

1. Always disable Uninstall Protection via the web dashboard before attempting local removal on managed enterprise endpoints.

2. Perform uninstalls during off-peak maintenance windows to avoid interrupting employee workflows.

3. After removing a device from the fleet, delete its entry in the dashboard Device List to maintain clean inventory management.

4. For temporary device decommissioning only, leave the client installed and disable all policies in the device Details panel instead of fully uninstalling.

5. Do not manually delete client service files or registry entries as a primary removal method; always use official Windows uninstall workflows to avoid system instability.