You can achieve this by simply removing the registry key which displays the uninstall option for that app. By removing the reg key end-users will not see the AirWatch Agent in the list of apps to remove.

You can't prevent them from deleting it but you can make it much harder for them to find it.   The below information will remove the Hub from the Add/Remove control panel.   The user would have to know how to run the msiexec command at the bottom of the post.

You can use the following script. (.bat) The value for the ID should be {A7C474DC-3891-F2BF-A22A-4FDB9BB65D38}, this script can be vastly improved to use variables etc and to determine if the device is x64 or x32.

This is skeleton skeleton code; not production ready.

wmic product where name="Workspace ONE Intelligent Hub Installer" get IdentifyingNumber

REG DELETE HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A7C474DC-3891-F2BF-A22A-4FDB9BB65D38} /f

REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A7C474DC-3891-F2BF-A22A-4FDB9BB65D38} /f

The Agent will auto uninstall when you push the un-enroll command via the console, if you need to remove the agent from the device then just use this command:

msiexec /x {A7C474DC-3891-F2BF-A22A-4FDB9BB65D38}

Roger