Share via

How to de-install crowdstrike falcon sensor without maintenance token?

Anonymous
2025-02-04T18:02:19+00:00

My PC runs on Windows 11. I would like to deinstall crowdstrike falcon sensor to use another antivirus.

Deinstall does not work as I don't have the maintenance token.

Any idea ?

Thanks

Fabrice

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

  1. Anonymous
    2025-04-23T09:07:18+00:00

    My PC runs on Windows 11. I would like to deinstall crowdstrike falcon sensor to use another antivirus.

    Deinstall does not work as I don't have the maintenance token.

    Any idea ?

    Thanks

    Fabrice

    1. From Safe Mode w/ Network, Open up Reg Edit by right clicking and selecting "Run as Admin", and backup the registry (export) Computer\HKEY_LOCAL_MACHINE\
    2. Disable csagent service: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CSAgent set START to 4
    3. Disable Falcon Service: HKLM:\SYSTEM\CurrentControlSet\Services\CSFalconService set START to 4
    4. delete the following registry key: HKLM:\SYSTEM\CurrentControlSet\Services\CSFalconService
    5. delete the following registry key: HKLM:\System\CrowdStrike
    6. delete the following registry key: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CSAgent\Sim
    7. delete the following registry key: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CSAgent
    8. Reboot the computer to standard mode
    9. Open up an elevated CMD and change directory to the location of CSUninstallTool.exe
    10. Run the following command: CSUninstallTool.exe /quiet
    11. Once the CMD returns to a blinking cursor verify the sensor service is no 
    longer running via the command:  sc query csagent 

if you see an error 1060 means the sensor is not running

    9 people found this answer helpful.
    0 comments

4 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2025-04-29T14:37:05+00:00

    Glad I could help

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2025-03-04T07:12:39+00:00

    Hello, Fabrice JACQUINET

    Welcome to the Microsoft community.

    Thank you for your feedback. I understand the need to uninstall the CrowdStrike Falcon Sensor, here are some troubleshooting options:

    Method 1: Force uninstallation via command line

    Run CMD as administrator 

    Press Win + S, search for cmd, right click and select Run as administrator.

    Locate the installation directory 

    cd “C:\Program Files\CrowdStrike\”

    If the path is different, please adjust it according to the actual installation location.

    Execute the uninstall command 

    CSUninstallTool.exe -repair -uninstall

    If prompted that a token is required, continue to try Method 2.

    Method 2: Forced removal in safe mode

    Enter Safe Mode 

    Press Win + R and type msconfig → boot → check Safe Boot → select Network → reboot.

    Delete CrowdStrike related files 

    Delete the following folders manually:

    C:\Program Files\CrowdStrike\

    C:\ProgramData\CrowdStrike\

    Clean the registry (proceed with caution!) 

    Press Win + R, type regedit and delete the following path:

    HKEY_LOCAL_MACHINE\SOFTWARE\CrowdStrike

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CSFalconService

    Disclaimer: Generally, modifying registry subkeys or work group is intended for advanced users, administrators, and IT Professionals. It can help fix some problems, however, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For further protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click How to back up and restore the registry in Windows - Microsoft Support to view the article. 

    Method 3: Contact CrowdStrike Official Support

    Visit the CrowdStrike support page and indicate that the device is out of corporate control and request remote assistance to uninstall it.

    Method 4:

    Try to reset your Windows, open Settings, System, Recovery, Reset your PC and select Do not keep personal files.

    Please back up your important data before doing this.

    Cautions

    Authorization required for corporate devices: If it is a company/school computer, uninstallation may violate IT policies, contact your administrator first.

    Backup data: Before operating the registry or system files, it is recommended to backup important data.

    I look forward to your feedback.

    Best Regards,

    Aaron| Microsoft Community Support Specialist

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2025-04-25T14:24:55+00:00

    Method 2 was the efficient one

    Thanks

    0 comments
  4. Anonymous
    2025-04-25T14:22:38+00:00

    Works fine

    Thanks a lot

    0 comments