Uninstall UserLock and remove all corresponding data

This guide explains how to uninstall all UserLock components and remove all related files, folders, registry entries, and scheduled tasks.

Follow these steps carefully if you need to permanently remove UserLock from your environment or perform a full reinstallation.

The recommended method is to use the automatic deployer in Uninstall mode.

1. Open the UserLock console.

2. Go to ⚙️ Server settings ▸ Agent distribution.

3. Enable Automatic distribution

4. Set Distribution mode to Uninstall agent.

   

5. Wait until all computers show Not installed in the list.

You can initiate the uninstallation of NPS and IIS agents directly from the UserLock console:

1. Open the UserLock console.

2. Go to Environment ▸ Machines.

3. Select one or more machines containing NPS or IIS agents.

4. Click the Actions button, then select Uninstall.

5. In the upper right corner, the Admin action icon animates. Click it to monitor the uninstallation progress.

6. Additional actions required:

   • for NPS agent, see how to uninstall the NPS agent manually

   • for IIS agent, see how to uninstall the IIS agent manually

By default, the desktop console is installed on the main UserLock server, and the web application can be installed either on the same server or on a dedicated IIS server.
The cleanup steps described below must be performed on each of these servers.

If UserLock reports were scheduled from the console, follow these steps to remove all related tasks:

1. Open the UserLock console.

2. Go to Reporting ▸ Scheduled reports.

3. Delete all scheduled reports with the Delete option in the Actions button.

4. Check the following folder and delete any remaining files (if any):

   %ALLUSERSPROFILE%\ISDecisions\Tasks

Choose one of the following methods:

• Control Panel:

  1. Open Programs and Features,

  2. select UserLock,

  3. then click Uninstall.

• Command line:
  Run the following executable (adjust path if UserLock was installed elsewhere.):
  %ProgramFiles(x86)%\ISDecisions\UserLock\CheckBeforeUninstall.exe

To locate the custom installation path via PowerShell (run as Administrator):

$userlock = Get-WmiObject Win32_Product | where Name -Like UserLock$guid = $userlock.IdentifyingNumber$installLocationObj = Get-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\$guid" -Name InstallLocation$installLocation = $installLocationObj.installLocationWrite-Host $installLocation

After uninstalling all components, some files and registry keys may still remain.

To ensure a complete cleanup, follow the steps below on each machine where UserLock components were installed.

1. Delete the installation folders:

   1. %ProgramFiles(x86)%\ISDecisions\UserLock\

   2. %ProgramFiles(x86)%\ISDecisions\

   Note

   Keep the ISDecisions folder if other IS Decisions products are installed.

2. Delete the configuration and log folders:

   1. %ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\

   2. %ALLUSERSPROFILE%\ISDecisions\UserLock\

   3. %ALLUSERSPROFILE%\ISDecisions\

   Note

   Delete only the UserLock folder if you want to keep settings from other IS Decisions products.

3. Delete folders:

   1. %APPDATA%\ISDecisions\UserLock

   2. %APPDATA%\ISDecisions

   Note

   Delete only the UserLock folder if you want to keep settings from other IS Decisions products.

4. Clean up the registry:

   1. HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ISDecisions\UserLock

   2. HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ISDecisions

   3. HKEY_CURRENT_USER\Software\ISDecisions\UserLock

   4. HKEY_CURRENT_USER\Software\ISDecisions

   Note

   Keep the ISDecisions key only if other products are installed.

• Delete agent binaries and log files (depending on OS):

  1. x64 OS: %windir%\SysWOW64\ULAgentExe.exe

  2. x86 OS: %windir%\System32\ULAgentExe.exe

  3. %windir%\System32\ULAgent.log

  4. %ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\UlAgent-%USERNAME%.err

• Delete session and pop-up helper programs:

  1. %windir%\SysWOW64\SessionAgent.exe

  2. %windir%\SysWOW64\SessionAgentUI.exe

  3. %windir%\SysWOW64\SessionAgent.log

  4. %windir%\SysWOW64\SessionAgentUI.log

• Clean up the registry

  Browse the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
  then delete:

  1. All values starting with UserLock (for example, UserLockServer, UserLockServerBackup, etc.)

  2. The subkey: Winlogon\UserLock

1. Delete the agent binary file:

   %windir%\System32\ULIasAgent.dll

2. Delete the agent log file:

   %ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\UlIasAgent.csv

3. Delete the registry key:

   HKEY_LOCAL_MACHINE\SOFTWARE\ISDecisions\UserLock\IAS

1. Delete the agent binary file:

   %windir%\System32\UlHttpModule.dll

2. Delete the agent log file:

   %ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\<Application Pool name>.http.txt

3. Delete the registry key:

   HKEY_LOCAL_MACHINE\SOFTWARE\ISDecisions\UserLock\IIS

In some environments, the UserLock server names are deployed to workstations through a Group Policy Object (GPO).
This allows the Desktop Agent to automatically locate the Primary and Backup UserLock servers, even if it was installed before the server configuration.

When uninstalling UserLock, these GPO settings must also be removed; otherwise, the registry entries will be automatically recreated after each Group Policy refresh.

1. Open the Group Policy Management Console (GPMC) on your domain controller.

2. Locate and edit the GPO used to deploy UserLock settings.

   

3. Remove all settings related to the UserLock agent (for example: Primary server, Backup server, Lock on screensaver, etc.).

4. Close the GPMC and apply the changes.

5. On each workstation or server, update the local policies by running: gpupdate /force

6. Verify that the registry key is removed:

   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ISDecisions\UserLock\Agent

   

• UserLockServerName – name of the Primary UserLock server.

• BackupServer – name of the Backup UserLock server.

• LockWhenScreenSaverStart – enables session lock when the screensaver starts.