To remove Trellix Endpoint Security (ENS) 26.x from a group of ePO - On-prem or ePO - SaaS endpoints, you can schedule a new deployment task in ePO - On-prem 5.10.x or 5.9.x.
This might be useful for testing or before reinstalling the client software.
Caution
Reinstall the client software as soon as possible. When it is uninstalled, the endpoint is not protected against threats.
Tip
Best practice: Duplicate the task you used to install the product, then change the Action to Remove.
From ePO - On-prem, select Menu → Software → Product Deployment.
On the Product Deployment page, click New Deployment.
On the New Deployment page:
Enter a name for the task.
Select each module you want to remove from the Package drop-down list, clicking + each time you want to select another one.
Trellix ENS Platform, also called the Common module, is removed automatically with the last module.
Change the Action to Remove.
Select the endpoints to remove the product from.
Configure any other settings, then click Save at the top of the page.
The Product Deployment page opens with your new project added to the list of deployments. Also, a client task is automatically created with the settings.
Results
To verify that the client software was removed from the selected endpoints, select Menu → Reporting → Dashboards, then select Endpoint Security: Installation Status. Check that the software was removed from the correct number of endpoints.