---
title: Uninstallation of Agent
slug: kronpam-agent-reference-guide-3-9-0/uninstallation-of-agent
createdAt: 2025-07-10T13:04:18.232Z
---

Kron EPM agent can be uninstalled in two ways. To remove a single agent from an endpoint, stop the agent service with an OTP and then uninstall the agent. To remove the agents of an agent group at once, first prepare them with the **Uninstall** parameter of the agent group, and then run the uninstallation with a software deployment tool.

### Uninstalling a Single Agent

Before uninstalling the agent—either via the Control Panel of Windows OS or by running the uninstallation script located at C:\Program Files\Kron\KronUninstall.exe—the Kron EPM agent service must be stopped by a user who has local administrator rights.

Uninstallation should only proceed after the service has been stopped. Otherwise, the process may fail or even crash.

To stop the agent service, users must use the "Stop Service" functionality over Tray app. Without this, the service cannot be stopped manually.

When the "Stop Service" option is clicked, the OTP (One-Time Password) of a PAM administrator will be requested. If the correct OTP is provided, the Kron EPM agent service will be stopped successfully. Otherwise, the operation will fail.

Once the service has been stopped, the agent can be uninstalled by a user with local administrator privileges.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Xg2FEggFHrNHA52d4klBP_image.png" size="40" caption="Figure – Stop Service Function" isUploading="false" width="667" height="566" darkWidth="667" darkHeight="566" showCaption="true"}

:::hint{type="info"}
Even if you have local admin right Agent Related services are automatically restarted by the Kron EPM agent service if it is terminated for any reason."
:::

### Preparing Agents for Bulk Uninstallation

The agent protects itself from unauthorized removal with service status checks and folder permission restrictions. To uninstall the agents of an agent group remotely, first remove these protections with the **Uninstall** parameter of the agent group.

When you enable **Uninstall**, every agent in the group removes its security controls. A remote uninstall command from a software deployment tool then completes successfully. A user who has local administrator rights on the endpoint can also uninstall the agent without entering an OTP.

:::hint{type="danger"}
While the **Uninstall** parameter is enabled, the agents in the group run without self-protection and any local administrator can remove them. Enable this parameter only for the uninstallation, and disable it when the operation is complete.
:::

The **Uninstall** parameter applies to every agent in the group. To remove a single agent, see Uninstalling a Single Agent.