FedericoLillacc
Enthusiast
Enthusiast

Windows - prevent Intelligent Hub uninstall

Jump to solution

Hello,

If a user is local admin of a Windows 10 device, is there a way to prevent the Intelligent Hub from being uninstalled?

Labels (1)
1 Solution

Accepted Solutions
RogerDeane
VMware Employee
VMware Employee

You can achieve this by simply removing the registry key which displays the uninstall option for that app. By removing the reg key end-users will not see the AirWatch Agent in the list of apps to remove.

You can't prevent them from deleting it but you can make it much harder for them to find it.   The below information will remove the Hub from the Add/Remove control panel.   The user would have to know how to run the msiexec command at the bottom of the post.

You can use the following script. (.bat) The value for the ID should be {A7C474DC-3891-F2BF-A22A-4FDB9BB65D38}, this script can be vastly improved to use variables etc and to determine if the device is x64 or x32.

This is skeleton skeleton code; not production ready.

wmic product where name="Workspace ONE Intelligent Hub Installer" get IdentifyingNumber

REG DELETE HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A7C474DC-3891-F2BF-A22A-4FDB9BB65D38} /f

REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7C474DC-3891-F2BF-A22A-4FDB9BB65D38} /f

The Agent will auto uninstall when you push the un-enroll command via the console, if you need to remove the agent from the device then just use this command:

msiexec /x {A7C474DC-3891-F2BF-A22A-4FDB9BB65D38}

Roger

View solution in original post

8 Replies
RogerDeane
VMware Employee
VMware Employee

You can achieve this by simply removing the registry key which displays the uninstall option for that app. By removing the reg key end-users will not see the AirWatch Agent in the list of apps to remove.

You can't prevent them from deleting it but you can make it much harder for them to find it.   The below information will remove the Hub from the Add/Remove control panel.   The user would have to know how to run the msiexec command at the bottom of the post.

You can use the following script. (.bat) The value for the ID should be {A7C474DC-3891-F2BF-A22A-4FDB9BB65D38}, this script can be vastly improved to use variables etc and to determine if the device is x64 or x32.

This is skeleton skeleton code; not production ready.

wmic product where name="Workspace ONE Intelligent Hub Installer" get IdentifyingNumber

REG DELETE HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A7C474DC-3891-F2BF-A22A-4FDB9BB65D38} /f

REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7C474DC-3891-F2BF-A22A-4FDB9BB65D38} /f

The Agent will auto uninstall when you push the un-enroll command via the console, if you need to remove the agent from the device then just use this command:

msiexec /x {A7C474DC-3891-F2BF-A22A-4FDB9BB65D38}

Roger

FedericoLillacc
Enthusiast
Enthusiast

Hello Roger, many thanks for your suggestion!

I'll develop a script and then I'll post the results here, maybe it could be helpful in the future.

0 Kudos
FedericoLillacc
Enthusiast
Enthusiast

Here's the script I developed following Roger's suggestion: WorkspaceONE/hide-installer.ps1 at master · tsmagnum/WorkspaceONE · GitHub

I used PowerShell. The logic is very simple: we look for the WS1 installer and, if present, we will delete the key.

We also check if the OS is x86 or x64 to locate the right key.

I included in the script PowerShell's common parameters, so you can run it using "-debug" in a PowerShell console to troubleshoot the execution in case of problem.

I deployed it to my clients using a product with a Files/Actions component, downloading the script in C:\Temp, executing it and then deleting it after the execution.

Please test the script before deploying it in production environments.

Thanks again to RogerDeane​ !

AaronWhittaker
Enthusiast
Enthusiast

Thanks for the script but if I can make a suggestion.

Microsoft don't recommend that you remove the entire key for an application that is still installed. Instead, if you remove the string 'UninstallString' from inside that key it will still appear in Add/Remove Programs but it wont have an uninstall option. Possibly even remove the 'ModifyPath' string as well if it is there.

Also if you remove the entire key, it will no longer appear in your installed apps report.

FedericoLillacc
Enthusiast
Enthusiast

Hi, thanks for your suggestion Aaron.

I tried deleting only the two string values suggested, but we have only a partial success: actually the uninstall option becomes grayed out and unavailable in "Apps and Features", but you are still able to remove the Intelligent Hub from Control Panel > Programs and Features.

Thanks again.

0 Kudos
AaronWhittaker
Enthusiast
Enthusiast

So I had a bit of a play around with your script and I have converted it into a WS1 profile if anyone wanted to deploy it. Unlike your script, I don't delete anything but I just rename the 'UninstallString' to "_UninstallString' and that removes the option for it to be removed from Add Remove Programs but can be restored at any time if needed (Sorry that its long but converting to Base64 does that)

Install

<wap-provisioningdoc id="64f1ef71-e69e-440c-a08c-fb66438ef639" name="customprofile">

  <characteristic type="com.airwatch.winrt.powershellcommand" uuid="81b348e9-ead6-4976-875c-0f4c92bb6ca4">

    <parm name="PowershellCommand" value="&amp;$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe -EncodedCommand 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" />

  </characteristic>

</wap-provisioningdoc>

Remove

<wap-provisioningdoc id="f970447c-6190-445c-bda4-f17c611e6a39" name="customprofile">

  <characteristic type="com.airwatch.winrt.powershellcommand" uuid="7d2421f9-8f1b-46b6-9053-0b0c02637c1d">

    <parm name="PowershellCommand" value="&amp;$env:SystemRoot\sysnative\WindowsPowerShell\v1.0\powershell.exe -EncodedCommand aQBmACAAKAAkAHQAYQByAGcAZQB0AEkAbgBzAHQAYQBsAGwAZQByACAAPQAgAEcAZQB0AC0AQwBpAG0ASQBuAHMAdABhAG4AYwBlACAALQBDAGwAYQBzAHMAIABXAGkAbgAzADIAXwBQAHIAbwBkAHUAYwB0ACAAfAAgAFcAaABlAHIAZQAtAE8AYgBqAGUAYwB0ACAAewAgACQAXwAuAE4AYQBtAGUAIAAtAGwAaQBrAGUAIAAiACoAVwBvAHIAawBzAHAAYQBjAGUAIABPAE4ARQAgAEkAbgB0AGUAbABsAGkAZwBlAG4AdAAgAEgAdQBiACoAIgAgAH0AKQAgAHsACgAgACAAIAAgACQAaQBkAGUAbgB0AGkAZgBpAGUAcgAgAD0AIAAkAHQAYQByAGcAZQB0AEkAbgBzAHQAYQBsAGwAZQByAC4ASQBkAGUAbgB0AGkAZgB5AGkAbgBnAE4AdQBtAGIAZQByAC4AVABvAFMAdAByAGkAbgBnACgAKQAKAAoAIAAgACAAIAAjAEMAaABlAGMAawBpAG4AZwAgAGkAZgAgAE8AUwAgAGkAcwAgAHgAOAA2AAoAIAAgACAAIABpAGYAIAAoACEAKABbAEUAbgB2AGkAcgBvAG4AbQBlAG4AdABdADoAOgBJAHMANgA0AEIAaQB0AE8AcABlAHIAYQB0AGkAbgBnAFMAeQBzAHQAZQBtACkAKQAgAHsACgAgACAAIAAgACAAIAAgACAAVwByAGkAdABlAC0ARABlAGIAdQBnACAAIgBPAFMAIAB4ADgANgAsACAAUgBlAG0AbwB2AGkAbgBnACAAVQBuAGkAbgBzAHQAYQBsAGwAIABLAGUAeQAgAGYAbwByACAAJABpAGQAZQBuAHQAaQBmAGkAZQByACIACgAgACAAIAAgACAAIAAgACAAUgBlAG4AYQBtAGUALQBJAHQAZQBtAFAAcgBvAHAAZQByAHQAeQAgAC0AUABhAHQAaAAgACIASABLAEwATQA6AFwAUwBPAEYAVABXAEEAUgBFAFwATQBpAGMAcgBvAHMAbwBmAHQAXABXAGkAbgBkAG8AdwBzAFwAQwB1AHIAcgBlAG4AdABWAGUAcgBzAGkAbwBuAFwAVQBuAGkAbgBzAHQAYQBsAGwAXAAkAGkAZABlAG4AdABpAGYAaQBlAHIAIgAgAC0ATgBhAG0AZQAgACIAVQBuAGkAbgBzAHQAYQBsAGwAUwB0AHIAaQBuAGcAIgAgAC0ATgBlAHcATgBhAG0AZQAgACIAXwBVAG4AaQBuAHMAdABhAGwAbABTAHQAcgBpAG4AZwAiAAoAIAAgACAAIAB9AAoACgAgACAAIAAgACMASQBmACAATwBTACAAaQBzACAAeAA2ADQACgAgACAAIAAgAGUAbABzAGUAIAB7AAoAIAAgACAAIAAgACAAIAAgAGkAZgAgACgAVABlAHMAdAAtAFAAYQB0AGgAIABIAEsATABNADoAXABTAE8ARgBUAFcAQQBSAEUAXABNAGkAYwByAG8AcwBvAGYAdABcAFcAaQBuAGQAbwB3AHMAXABDAHUAcgByAGUAbgB0AFYAZQByAHMAaQBvAG4AXABVAG4AaQBuAHMAdABhAGwAbABcACQAaQBkAGUAbgB0AGkAZgBpAGUAcgApACAAewAKACAAIAAgACAAIAAgACAAIAAgACAAIAAgAFcAcgBpAHQAZQAtAEQAZQBiAHUAZwAgACIATwBTACAAeAA2ADQALAAgAFIAZQBtAG8AdgBpAG4AZwAgAFUAbgBpAG4AcwB0AGEAbABsACAASwBlAHkAIABmAG8AcgAgACQAaQBkAGUAbgB0AGkAZgBpAGUAcgAiAAoAIAAgACAAIAAgACAAIAAgACAAIAAgACAAUgBlAG4AYQBtAGUALQBJAHQAZQBtAFAAcgBvAHAAZQByAHQAeQAgAC0AUABhAHQAaAAgACIASABLAEwATQA6AFwAUwBPAEYAVABXAEEAUgBFAFwATQBpAGMAcgBvAHMAbwBmAHQAXABXAGkAbgBkAG8AdwBzAFwAQwB1AHIAcgBlAG4AdABWAGUAcgBzAGkAbwBuAFwAVQBuAGkAbgBzAHQAYQBsAGwAXAAkAGkAZABlAG4AdABpAGYAaQBlAHIAIgAgAC0ATgBhAG0AZQAgACIAXwBVAG4AaQBuAHMAdABhAGwAbABTAHQAcgBpAG4AZwAiACAALQBOAGUAdwBOAGEAbQBlACAAIgBVAG4AaQBuAHMAdABhAGwAbABTAHQAcgBpAG4AZwAiAAoAIAAgACAAIAAgACAAIAAgAH0AIABlAGwAcwBlACAAewAKACAAIAAgACAAIAAgACAAIAAgACAAIAAgAFcAcgBpAHQAZQAtAEQAZQBiAHUAZwAgACIATwBTACAAeAA2ADQALAAgAFIAZQBtAG8AdgBpAG4AZwAgAFUAbgBpAG4AcwB0AGEAbABsACAASwBlAHkAIABmAG8AcgAgACQAaQBkAGUAbgB0AGkAZgBpAGUAcgAiAAoAIAAgACAAIAAgACAAIAAgACAAIAAgACAAUgBlAG4AYQBtAGUALQBJAHQAZQBtAFAAcgBvAHAAZQByAHQAeQAgAC0AUABhAHQAaAAgACIASABLAEwATQA6AFwAUwBPAEYAVABXAEEAUgBFAFwAVwBPAFcANgA0ADMAMgBOAG8AZABlAFwATQBpAGMAcgBvAHMAbwBmAHQAXABXAGkAbgBkAG8AdwBzAFwAQwB1AHIAcgBlAG4AdABWAGUAcgBzAGkAbwBuAFwAVQBuAGkAbgBzAHQAYQBsAGwAXAAkAGkAZABlAG4AdABpAGYAaQBlAHIAIgAgAC0ATgBhAG0AZQAgACIAXwBVAG4AaQBuAHMAdABhAGwAbABTAHQAcgBpAG4AZwAiACAALQBOAGUAdwBOAGEAbQBlACAAIgBVAG4AaQBuAHMAdABhAGwAbABTAHQAcgBpAG4AZwAiAAoAIAAgACAAIAAgACAAIAAgAH0ACgAgACAAIAAgAH0ACgAKACAAIAAgACAARQB4AGkAdAAgADAACgB9ACAAZQBsAHMAZQAgAHsACgAgACAAIAAgAEUAeABpAHQAIAAxAAoAfQA=" />

  </characteristic>

</wap-provisioningdoc>

The custom setting needs to target the 'Workspace ONE Intelligent Hub' and not be made atomic.

techquisit
Contributor
Contributor

Can you please simplify this method in steps?

0 Kudos
techquisit
Contributor
Contributor

''msiexec /x {A7C474DC-3891-F2BF-A22A-4FDB9BB65D38}"

This command wont work, cannot remove the WSOIH app from this, what should i do to remove the application from the workstation?

Tags (1)
0 Kudos