To remove the SentinelOne Sentinel Agent from Windows 10, you need the agent’s uninstall passphrase or an administrator with access to the SentinelOne management console. The easiest way is for your IT admin to uninstall or decommission the device from the console. If you have the passphrase, open Control Panel > Programs and Features, select Sentinel Agent, click Uninstall, and enter the passphrase when asked. Without the passphrase, the agent’s anti-tamper protection blocks removal, even for local administrators.
That protection is intentional. SentinelOne is endpoint security software, usually installed by a company or school, and it’s built so malware and unauthorized users can’t switch it off. Here’s how removal works in each situation.
Before you start
- Is this a work or school computer? If so, don’t try to remove the agent yourself. Removing security software without approval can break your organization’s policies, and the console will flag the device as offline. Contact your IT team.
- Is this a computer you bought used, or one from a former job? The previous owner’s IT team can release it from their console or give you the passphrase. SentinelOne support may also be able to help if you can show the device is yours.
- Are you the admin? You can uninstall remotely from the console or get the passphrase for the specific device.
Method 1: Uninstall from the SentinelOne management console (admins)
- Sign in to your SentinelOne management console.
- Go to Sentinels (or Endpoints) and find the device.
- Select it, open the Actions menu, and choose Uninstall. Some consoles list it under Agent Actions.
- Confirm. The agent removes itself the next time the device checks in. The device needs an internet connection.
- If the device is being retired, choose Decommission as well so it no longer counts against your licenses.
Menu names vary between console versions, so check SentinelOne’s documentation for your version if you don’t see these options.
Method 2: Uninstall on the PC with the passphrase
- Ask your admin for the device’s passphrase. In the console, it’s available for each endpoint under Actions > Show Passphrase.
- On the PC, sign in with an administrator account.
- Press Windows + R, type appwiz.cpl, and press Enter to open Programs and Features. You can also use Settings > Apps.
- Select Sentinel Agent and click Uninstall.
- Type the passphrase when asked, then click Uninstall.
- Restart the PC when the uninstall finishes.
Admins can also remove the agent silently with the uninstall command and passphrase from SentinelOne’s documentation, which is useful when removing it from many PCs with a deployment tool.
Method 3: If the agent is damaged or won’t uninstall
If the uninstall fails, the agent is corrupted, or it no longer connects to the console, SentinelOne provides a cleanup tool through its support portal. Your admin can request it from SentinelOne support, along with the steps for your agent version. It usually needs to run in Safe Mode and may require the passphrase or a support-issued key.
What doesn’t work
- Ending the process in Task Manager or stopping its services. Anti-tamper protection blocks this.
- Deleting the program folder, even in Safe Mode. This can leave the PC unstable and still won’t remove the drivers cleanly.
- Third-party uninstaller apps. They can’t get around the passphrase and may leave broken leftovers.
If you truly can’t get the passphrase and the PC is yours, backing up your files and doing a clean install of Windows removes everything, including the agent. See how to install Windows on a PC for the steps.
After you remove it
- Make sure Microsoft Defender Antivirus turns back on. Go to Settings > Update & Security > Windows Security > Virus & threat protection.
- Check that Sentinel Agent is gone from the apps list and that no SentinelOne services remain in services.msc.
Frequently asked questions
Can I remove SentinelOne without the passphrase?
Not normally. The passphrase is required when anti-tamper protection is on, which is the default. Contact whoever manages the device.
Why did SentinelOne come back after I uninstalled it?
Your organization’s device management tool, like Intune or Group Policy, may reinstall it automatically. Ask IT to remove the device from those tools too.
Is Sentinel Agent a virus?
No. It’s legitimate security software from SentinelOne. It’s often installed on work and school computers to detect threats.
Does this work on Windows 11?
Yes. The steps are the same on Windows 11, although the apps list is under Settings > Apps > Installed apps.
Kermit Matthews is a freelance writer based in Philadelphia, Pennsylvania with more than a decade of experience writing technology guides. He has a Bachelor’s and Master’s degree in Computer Science and has spent much of his professional career in IT management.
He specializes in writing content about iPhones, Android devices, Microsoft Office, and many other popular applications and devices.