Uninstalling the Device Guard module removes Device Guard policy settings from all policies, removes the server module from the management server, and removes the agent modules from endpoints on host systems. You do not need to disable Device Guard before you uninstall it. You can also remove the agent module from a host set without removing the module from the server.
: