Hello,
I apologize as this subject may extend beyond my primary focus, under product Windows Server / User experience, we specifically addressing remote desktop and printing issues.
I did come across some references that might be useful, and I hope they're new to you:
Sysmon Uninstall successful but leaving locked executable - Microsoft Q&A
Sysmon: How to install, upgrade, and uninstall - James' Pereductions (jamesgibbins.com)
Note: Since the websites are not hosted by Microsoft, the links may change without notice. Microsoft does not guarantee the accuracy of this information.
If these resources don’t provide a solution, another option would be to post your query on the Questions - Microsoft Q&A..
Your understanding and cooperation are appreciated!
Best regards,
Karlie