---
locale: "en"
updated_at: "2026-06-30T10:50:53.764Z"
canonical: "https://www.isdecisions.com/en/userlock/docs/guides/installation/advanced/uninstall-userlock"
---

# Uninstall UserLock and remove all corresponding data

Remove UserLock safely and clean up remaining files.

## Introduction

This guide explains how to uninstall all UserLock components and remove all related files, folders, registry entries, and scheduled tasks.

Follow these steps carefully if you need to permanently remove UserLock from your environment or perform a full reinstallation.

## 1. Uninstall the Desktop agents

See [how to uninstall the desktop agent](/userlock/docs/guides/deploying-agents/desktop-agent#uninstall-the-agent).

## 2. Uninstall NPS and IIS agents

- For the NPS agent, see [how to uninstall the NPS agent](/userlock/docs/guides/deploying-agents/nps-agent#uninstall-the-agent).
- For the IIS agent, see [how to uninstall the IIS agent](/userlock/docs/guides/deploying-agents/iis-agent#uninstall-manually).

## 3. Uninstall the "Web Application," "MFA for IIS," and "UserLock Anywhere" features

You can uninstall the **Web Application**, **MFA for IIS**, and **UserLock Anywhere** features from the **UserLock Configuration Wizard**:

1. Log on to the server with one of these features installed.
2. Open the Configuration Wizard from the **Start menu** ▸ **UserLock** ▸ **Configuration Wizard**.
3. Click the **Delete** button for the feature you want to uninstall from the server.
4. Confirm by clicking **Yes**.

Repeat this process for each of these features you want to uninstall from the server or any other affected server.

## 4. Uninstall the "Single Sign-On" feature

> **Note**
>
> You will first need to un-federate UserLock SSO from your M365 domain and/or deregister UserLock from your SSO applications. Refer to the following links:
> 
> - [Configure SSO applications](/userlock/docs/guides/sso/configure-the-applications/) (reverse of the application configuration)
> - [Uninstall the standby SSO server](/userlock/docs/guides/sso/install-backup-sso-server#step-2-configure-the-backup-sso-service)
> - [Remove domain federation via PowerShell](/userlock/docs/guides/sso/configure-the-applications/microsoft/powershell-configuration#canceling-domain-federation)
> 
> You should also refer to the following link to remove the installed DNS configuration and certificates:
> 
> - [Step 2: Configure DNS](/userlock/docs/guides/sso/install-configure-sso#step-2-configure-your-dns)

You can uninstall the SSO feature from the UserLock **Configuration Wizard**:

1. Log on to the server with the feature installed.
2. Open the Configuration Wizard from the **Start menu** ▸ **UserLock** ▸ **Configuration Wizard**.
3. Click the **Edit** button for the **Single Sign-On** feature.
4. Click the **Delete the configuration** button.

## 5. Uninstall the Backup server (if implemented)

Choose one of the following methods:

- **Control Panel: **
  1. Open **Programs and Features**,
  2. select **UserLock**,
  3. then click **Uninstall**.
- **Command line:**
Run the following executable (adjust path if UserLock was installed elsewhere.):
`%ProgramFiles(x86)%\ISDecisions\UserLock\CheckBeforeUninstall.exe`

To locate the custom installation path via PowerShell (run as Administrator):

```powershell
$userlock = Get-WmiObject Win32_Product | where Name -Like UserLock
$guid = $userlock.IdentifyingNumber
$installLocationObj = Get-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\$guid" -Name InstallLocation
$installLocation = $installLocationObj.installLocation
Write-Host $installLocation
```

**Confirm the unregistration** which will be carried out on the primary server: click **Yes**.

> **Note**
>
> Installing UserLock also installs third-party programs. For example, for UserLock version 13.0:
> 
> - *Microsoft .NET 8.0.22 - Desktop Runtime*
> - *Microsoft .NET 8.0.22 - Windows Server Hosting*
> - *Microsoft .NET Framework 4.7.2 Full*
> - *Microsoft Visual C++ 2015-2022 Redistributable Package (x86/x64)*
> - *WebView2 Evergreen Standalone Installer*
> 
> **Warning!**
> 
> Uninstalling these programs requires **first verifying** that they are not shared with other applications on the server. **These applications may no longer function after uninstallation**.
> 
> Therefore, **UserLock does not include automatic uninstallation**. **Manual** uninstallation is the **responsibility** and requires **vigilance** **from our customers**.

## 6. Remove scheduled tasks

By default, the **desktop console** is installed on the **main UserLock server**, and the **web application** can be installed either on the same server or on a **dedicated IIS server**.
The cleanup steps described below must be performed on **each** of these servers.

If **UserLock reports** were scheduled from the console, follow these steps to remove all related tasks:

1. Open the **UserLock console**.
2. Go to **Reporting ▸ Scheduled reports**.
3. Delete all scheduled reports with the **Delete **option in the Actions button.
4. Check the following folder and delete any remaining files (if any):
  `%ALLUSERSPROFILE%\ISDecisions\Tasks`

> **Note**
>
> Deleting them from the console will also automatically remove the corresponding tasks from the **Windows Task Scheduler**.

## 7. Uninstall the Primary server

Choose one of the following methods:

- **Control Panel: **
  1. Open **Programs and Features**,
  2. select **UserLock**,
  3. then click **Uninstall**.
- **Command line:**
Run the following executable (adjust path if UserLock was installed elsewhere.):
`%ProgramFiles(x86)%\ISDecisions\UserLock\CheckBeforeUninstall.exe`
To locate the custom installation path via PowerShell (run as Administrator):

```powershell
$userlock = Get-WmiObject Win32_Product | where Name -Like UserLock
$guid = $userlock.IdentifyingNumber
$installLocationObj = Get-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\$guid" -Name InstallLocation
$installLocation = $installLocationObj.installLocation
Write-Host $installLocation
```

> **Note**
>
> Installing UserLock also installs third-party programs. For example, for UserLock version 13.0:
> 
> - *Microsoft .NET 8.0.22 - Desktop Runtime*
> - *Microsoft .NET 8.0.22 - Windows Server Hosting*
> - *Microsoft .NET Framework 4.7.2 Full*
> - *Microsoft Visual C++ 2015-2022 Redistributable Package (x86/x64)*
> - *WebView2 Evergreen Standalone Installer*
> 
> **Warning!**
> 
> Uninstalling these programs requires **first verifying** that they are not shared with other applications on the server. **These applications may no longer function after uninstallation**.
> 
> Therefore, **UserLock does not include automatic uninstallation**. **Manual** uninstallation is the **responsibility** and requires **vigilance** **from our customers**.

## 8. Delete remaining files and registry entries

After uninstalling all components, some files and registry keys may still remain.

To ensure a complete cleanup, follow the steps below on each machine where **UserLock** components were installed.

1. Delete the **installation **folders:
  1. `%ProgramFiles(x86)%\ISDecisions\UserLock\`
  2. `%ProgramFiles(x86)%\ISDecisions\ `
  > **Note**
  >
  > Keep the **ISDecisions **folder if other IS Decisions products are installed.
2. Delete the **configuration **and **log **folders:
  1. `%ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\`
  2. `%ALLUSERSPROFILE%\ISDecisions\UserLock\`
  3. `%ALLUSERSPROFILE%\ISDecisions\ `
  > **Note**
  >
  > Delete only the **UserLock folder** if you want to keep settings from other IS Decisions products.
3. Delete **folders**:
  1. `%APPDATA%\ISDecisions\UserLock`
  2. `%APPDATA%\ISDecisions `
  > **Note**
  >
  > Delete only the **UserLock folder** if you want to keep settings from other IS Decisions products.
4. Clean up the **registry:**
  1. `HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ISDecisions\UserLock`
  2. `HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ISDecisions `
  3. `HKEY_CURRENT_USER\Software\ISDecisions\UserLock`
  4. `HKEY_CURRENT_USER\Software\ISDecisions`
  > **Note**
  >
  > Keep the **ISDecisions **key only if other products are installed.

### On computers with the Desktop agent

- Delete agent **binaries** and **log** files (depending on OS):
  1. **x64 OS**: `%windir%\SysWOW64\ULAgentExe.exe`
  2. **x86 OS**: `%windir%\System32\ULAgentExe.exe`
  3. `%windir%\System32\ULAgent.log `
  4. `%ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\UlAgent-%USERNAME%.err `
- Delete session and pop-up helper programs:
  1. `%windir%\SysWOW64\SessionAgent.exe`
  2. `%windir%\SysWOW64\SessionAgentUI.exe `
  3. `%windir%\SysWOW64\SessionAgent.log `
  4. `%windir%\SysWOW64\SessionAgentUI.log `
- Clean up the **registry **
  Browse the `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon` 
  then delete:
  1. All values starting with `UserLock` (for example, `UserLockServer`, `UserLockServerBackup`, etc.)
  2. The subkey: `Winlogon\UserLock`

### On computers with the NPS agent

1. Delete the **agent binary** file:
  `%windir%\System32\ULIasAgent.dll`
2. Delete the **agent log **file:
  `%ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\UlIasAgent.csv`
3. Delete the **registry **key:
  `HKEY_LOCAL_MACHINE\SOFTWARE\ISDecisions\UserLock\IAS`

### On computers with the IIS agent

1. Delete the **agent binary** file:
  `%windir%\System32\UlHttpModule.dll`
2. Delete the **agent log** file:
  `%ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\<Application Pool name>.http.txt`
3. Delete the **registry **key:
  `HKEY_LOCAL_MACHINE\SOFTWARE\ISDecisions\UserLock\IIS`

### If server names were deployed via Group Policy

In some environments, the **UserLock server names** are deployed to workstations through a **Group Policy Object (GPO)**.
This allows the **Desktop Agent** to automatically locate the Primary and Backup UserLock servers, even if it was installed before the server configuration.

When uninstalling UserLock, these GPO settings must also be removed; otherwise, the registry entries will be automatically recreated after each Group Policy refresh.

#### To remove the GPO configuration:

1. Open the **Group Policy Management Console (GPMC)** on your domain controller.
2. Locate and edit the GPO used to deploy **UserLock** settings.
  ![](https://a.storyblok.com/f/122374/687x487/15bb27e222/5-gpo-configuration.png)
3. Remove all settings related to the UserLock agent (for example: Primary server, Backup server, Lock on screensaver, etc.).
4. Close the GPMC and apply the changes.
5. On each workstation or server, update the local policies by running: `gpupdate /force`
6. Verify that the registry key is removed:
  `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ISDecisions\UserLock\Agent`
  ![](https://a.storyblok.com/f/122374/634x517/b56a730b5e/6-gpo-result-in-registry.png)

#### Common values that may be present:

- `UserLockServerName` – name of the Primary UserLock server.
- `BackupServer` – name of the Backup UserLock server.
- `LockWhenScreenSaverStart` – enables session lock when the screensaver starts.