UserLock Frequently Asked Questions
How to uninstall UserLock and remove all corresponding data
Uninstall Agents
Uninstall Desktop Agents
The recommended method is to use the automatic deployer with the "Uninstall" deployment mode. To do this:
Run the UserLock Console.
Browse the "Agent distribution" view:
Click on "Properties":
In the "General" section, set the "Distribution" setting to "Undeploy the agent" (learn more), validate through OK:
Enable the automatic mode as documented here:
Wait until all Desktop Agents are uninstalled: all computers listed in the "Agent distribution" view should display "Not installed".
Alternatives to uninstall the Desktop Agent:
- Through the console (learn more),
- Manually (learn more - For Mac, see this page).
- Through the MSI technology if you used it for deployment (learn more).
- Through the "Uninstall-UserLockAgent" UserLockPowerShell cmdlet (learn more).
- Through "UserLockAPI" methods (learn more).
Uninstall NPS Agents
Uninstall all NPS Agents installed. See this page.
Alternatives to uninstall the NPS Agent:
- Manually (learn more).
- Through the "Uninstall-UserLockAgent" UserLockPowerShell cmdlet (learn more).
- Through "UserLockAPI" methods (learn more).
Uninstall IIS Agents
Uninstall all IIS Agents installed. See this page.
Alternatives to uninstall the IIS Agent:
- Manually (learn more).
- Through the "Uninstall-UserLockAgent" UserLockPowerShell cmdlet (learn more).
- Through "UserLockAPI" methods (learn more).
Delete UserLock scheduled tasks
On all computers on which the console has been installed, if UserLock reports or scripts have been scheduled on the computer, remove these tasks from the UserLock console or from the Windows Task Scheduler. Then, no files related to these tasks should be in the "%ALLUSERSPROFILE%\ISDecisions\Tasks" folder. Otherwise, delete these files.
Delete the "%ALLUSERSPROFILE%\ISDecisions" folder (unless you want to retain data from other IS Decisions products).
Finally, delete the folder "%ALLUSERSPROFILE%\ISDecisions\Tasks".
Uninstall the Backup server (if installed)
Follow the same procedure as in the "Uninstall the Primary server" section.
Uninstall the Primary server
Uninstall the UserLock server using one of the following methods:
- Through the "Programs and Features" Windows component: select "UserLock", then "Uninstall".
- Running the "%ProgramFiles(x86)%\ISDecisions\UserLock\CheckBeforeUninstall.exe" UserLock component. Note that "%ProgramFiles(x86)%\ISDecisions\UserLock\" is the default path for the installation folder of the UserLock package. If the default installation path is not used, here is a way to get it after installation through PowerShell (run PowerShell x64 with the "Run as administrator" option on the UserLock server):
- $userlock = Get-WmiObject Win32_Product | where Name -Like *UserLock*
- $guid = $userlock.IdentifyingNumber
- $installLocationObj = Get-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\$guid" -Name InstallLocation
- $installLocation = $installLocationObj.installLocation
- Write-Host $installLocation
Delete remaining files and folders
On all computers where UserLock (including the "Service" component) was installed
Delete the "%ProgramFiles(x86)%\ISDecisions\UserLock\" folder.
Delete the "%ProgramFiles(x86)%\ISDecisions\" folder (unless you want to retain data from other IS Decisions products).
Delete the "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ISDecisions\UserLock" registry key.
Delete the "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\ISDecisions" registry key (unless you want to retain data from other IS Decisions products).
Delete the "%ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\" folder.
On all computers where the Web Console was used
Web Console log file: "%ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\WebConsoleLog.txt".
On all computers where the Console was installed
Console log file: "%appdata%\ISDecisions\UserLock\Log.txt".
Console configuration: "%appdata%\ISDecisions\UserLock\Default.xml".
Delete the "%APPDATA%\ISDecisions\UserLock" folder.
Delete the "%APPDATA%\ISDecisions" folder (unless you want to retain data from other IS Decisions products).
Delete the "HKEY_CURRENT_USER\Software\ISDecisions\UserLock" registry key.
Delete the "HKEY_CURRENT_USER\Software\ISDecisions" registry key (unless you want to retain data from other IS Decisions products).
Delete the "%ALLUSERSPROFILE%\ISDecisions\UserLock" folder.
Delete the "%ALLUSERSPROFILE%\ISDecisions" folder (unless you want to retain data from other IS Decisions products).
On all computers where the Desktop Agent was installed
Agent binary file:
- x64 OS and (Vista/Server 2008 or higher) OS: "%windir%\SysWOW64\ULAgentExe.exe".
- x86 OS and (Vista/Server 2008 or higher) OS: "%windir%\System32\ULAgentExe.exe".
- All other cases (XP/Server 2003): "%windir%\System32\ULAgent.dll".
Agent log file:
- x64 OS and (Vista/Server 2008 or higher) OS: "%windir%\SysWOW64\ULAgent.err".
- All other cases: "%windir%\System32\ULAgent.err".
- Virtual store: "%ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\UlAgent-%USERNAME%.err".
Session events not notified live to the UserLock service are temporarily stored in: "%windir%\System32\ULAgent.log".
Program launched for remote logoff and popups binary file:
- x64 OS and (Vista/Server 2008 or higher) OS: "%windir%\SysWOW64\SessionAgent.exe" and "%windir%\SysWOW64\SessionAgentUI.exe".
- All other cases: "%windir%\System32\SessionAgent.exe" and "%windir%\System32\SessionAgentUI.exe".
Program launched for remote logoff and popups log file:
- x64 OS and (Vista/Server 2008 or higher) OS: "%windir%\SysWOW64\SessionAgent.log" and "%windir%\SysWOW64\SessionAgent.log".
- All other cases: "%windir%\System32\SessionAgent.log" and "%windir%\System32\SessionAgentUI.log".
Run "RegEdit", browse the "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" registry key, then delete:
- All registry values beginning with "UserLock" (UserLockCfg, UserLockLastAnalysedEventDate, UserLockLastCheckDate, UserLockServer, UserLockServerBackup, UserLockServerLastUsed, UserLockSessions).
- The "UserLock" sub key (ie the "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserLock" registry key).
On all computers where the Mac Agent was installed
Delete the following files:
- /var/log/UserLock.log
- /var/log/UserLock.Auth.log
- /var/log/UserLock.commands_stderr.log
On all computers where the NPS Agent was installed
Agent binary file: "%windir%\System32\ULIasAgent.dll".
Agent log file: "%ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\UlIasAgent.csv".
Delete the "HKEY_LOCAL_MACHINE\SOFTWARE\ISDecisions\UserLock\IAS" registry key.
On all computers where the IIS Agent was installed
Agent binary file:
- HTTP Module: "%windir%\System32\UlHttpModule.dll"
Agent log file:
- HTTP Module: %ALLUSERSPROFILE%\ISDecisions\UserLock\Logs\<Application Pool name>.http.txt
Delete the "HKEY_LOCAL_MACHINE\SOFTWARE\ISDecisions\UserLock\IIS" registry key.
Special case: For the Desktop UserLock Agent, when UserLock server names are deployed through GPO
See the "Group policy deployment" help page.
Example:
Result (after gpupdate) on a workstation
Full path of the registry key is "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\ISDecisions\UserLock\Agent".
Concerned registry values are:
- "UserLockServerName": name of the Primary UserLock server.
- "BackupServer": name of the Backup UserLock server.
- "LockWhenScreenSaverStart": switch for the Desktop Agent to send a Lock session event when the screen saver starts.
- ...
Example:
In this case, to remove it, delete GPO settings for UserLock, then update GPO settings on all computers.