If the uninstall password for the DLP 15.0 Endpoint agent is forgotten, what is the recommended workaround?

If the uninstall password for the DLP 15.0 Endpoint agent is forgotten, what is the recommended workaround?

• A. Reset the password by editing the local agent properties on the client.
• B. Apply a new global agent uninstall password in the Enforce management console.
• C. Uninstall the agent using an administrator account without a password.
• D. Reinstall the Enforce server to reset the password.

Answer: (B)

The key idea is centralized control of the endpoint uninstall credential. In DLP Enforce, the uninstall password is managed from the management console as a global setting. When that password is forgotten, the supported recovery is to set a new global uninstall password in the Enforce management console. This refreshes the credential so you can uninstall or re-provision endpoints as needed without altering client machines or reinstalling the server. Editing local agent properties on a client doesn’t reset the central credential, and attempting to uninstall without a password isn’t supported or secure. Reinstalling the Enforce server is unnecessary and overly disruptive just to recover the uninstall capability. Setting a new global uninstall password is the proper, centralized workaround.

The key idea is centralized control of the endpoint uninstall credential. In DLP Enforce, the uninstall password is managed from the management console as a global setting. When that password is forgotten, the supported recovery is to set a new global uninstall password in the Enforce management console. This refreshes the credential so you can uninstall or re-provision endpoints as needed without altering client machines or reinstalling the server.

Editing local agent properties on a client doesn’t reset the central credential, and attempting to uninstall without a password isn’t supported or secure. Reinstalling the Enforce server is unnecessary and overly disruptive just to recover the uninstall capability. Setting a new global uninstall password is the proper, centralized workaround.