Using an unlock code to uncontain a Windows host

Prev Next

This section describes how to use the unlock code to uncontain your Windows host.

To use an unlock code to remove a Windows host from containment:
  1. Log in to the contained Windows host.

  2. Open Command line prompt and use the cd command to change to the C:\Windows\FireEye C:\Windows\Trellix\XClient\uncontain.exe directory:

    cd C:\Windows\FireEyecd C:\Windows\Trellix\XClient\uncontain.exe

  3. Run the uncontain executable file with the unlock code:

    uncontain.exe <unlock code>