Uninstalling the SuperIT RMM agent

This guide covers removing the SuperIT RMM agent from Windows devices, one at a time or in bulk. It mirrors the installation guide: use whichever method you deployed with.

What gets removed

The agent is installed by an MSI package named SuperIT Agent. Uninstalling it:

1. Stops and deletes the SuperIT Windows service
2. Removes the program files from C:\Program Files (x86)\SuperIT\agent
3. Removes the bootstrap credentials file from C:\ProgramData\SuperIT

It deliberately leaves behind the configuration and data in C:\ProgramData\SuperIT (config.yaml, identity.json, logs) and the agent's stored credentials, so that upgrades keep their settings. If you are decommissioning a device, or reinstalling it into a different team, also follow Remove leftover data.

Uninstall script

uninstall-superit.ps1 finds the installed agent, uninstalls it silently and checks the service is gone. The Powershell, Group Policy and MDM methods below all use it. Run it elevated or as SYSTEM; the installation guide covers execution policy and running under an RMM agent.

Pass -RemoveData to also delete the leftover configuration, identity and credentials. Without it, only the program is removed.

# uninstall-superit.ps1
# Uninstall the SuperIT Agent. Add -RemoveData to also delete its data and credentials.
param([switch]$RemoveData)

$uninstallKeys = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*',
                 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*'
$apps = @(Get-ItemProperty $uninstallKeys -ErrorAction SilentlyContinue |
          Where-Object DisplayName -eq 'SuperIT Agent')

if ($apps.Count -eq 0) {
    Write-Output "SuperIT Agent is not installed"
}

$rebootNeeded = $false
foreach ($app in $apps) {
    Write-Output "Uninstalling SuperIT Agent $($app.DisplayVersion) ($($app.PSChildName))"
    $proc = Start-Process msiexec.exe -Wait -PassThru -ArgumentList "/x $($app.PSChildName) /quiet /norestart"
    switch ($proc.ExitCode) {
        0       { }
        1605    { Write-Output "Already removed" }
        3010    { $rebootNeeded = $true }
        default { Write-Error "msiexec failed with exit code $($proc.ExitCode)"; exit $proc.ExitCode }
    }
}

# The installer removes the service; clean it up if anything was left behind
if (Get-Service -Name 'SuperIT' -ErrorAction SilentlyContinue) {
    Stop-Service -Name 'SuperIT' -Force -ErrorAction SilentlyContinue
    sc.exe delete SuperIT | Out-Null
}

$failures = @()
if ($RemoveData) {
    $dataDir = "$env:ProgramData\SuperIT"
    foreach ($path in $dataDir, "${env:ProgramFiles(x86)}\SuperIT", "$env:ProgramFiles\SuperIT") {
        if (Test-Path $path) {
            Remove-Item -Path $path -Recurse -Force -ErrorAction SilentlyContinue
        }
    }
    # Program files locked until a restart are removed by Windows then; the data must go now
    if (Test-Path $dataDir) {
        $failures += "could not delete $dataDir"
    }
    [Environment]::SetEnvironmentVariable('SUPERIT_INSTALL_KEY', $null, 'Machine')

    # The agent's credentials live in the SYSTEM account's Credential Manager,
    # so they can only be deleted from a script running as SYSTEM
    if ([Security.Principal.WindowsIdentity]::GetCurrent().IsSystem) {
        cmdkey /delete:superit:operational 2>&1 | Out-Null
        if (cmdkey /list:superit:operational | Select-String 'Target:') {
            $failures += "could not delete the stored credential superit:operational"
        }
    } else {
        $failures += "not running as SYSTEM, so the stored credential superit:operational was not deleted"
    }
}

if (Get-Service -Name 'SuperIT' -ErrorAction SilentlyContinue) {
    $failures += "the SuperIT service is still present"
}
if ($failures.Count -gt 0) {
    $failures | ForEach-Object { Write-Error "Uninstall incomplete: $_" }
    exit 1
}
if ($rebootNeeded) {
    Write-Output "SuperIT Agent uninstalled; a restart is needed to finish removing files"
    exit 3010
}
Write-Output "SuperIT Agent uninstalled successfully"

The script exits 0 on success, 3010 when a restart is needed to finish (it never restarts the device itself), and 1 when anything it was asked to remove is still there, naming what was left, so RMM tools can report the result.

Uninstall Methods

$app = Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*',
                        'HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*' |
       Where-Object DisplayName -eq 'SuperIT Agent'
$app | Select-Object DisplayName, DisplayVersion, PSChildName

msiexec /x $app.PSChildName /quiet /norestart

powershell.exe -ExecutionPolicy Bypass -File uninstall-superit.ps1 -RemoveData

Install: powershell.exe -ExecutionPolicy Bypass -Command "exit 0"
Uninstall: powershell.exe -ExecutionPolicy Bypass -File uninstall-superit.ps1 -RemoveData
Install behavior: System
Detection rule: File C:\Program Files (x86)\SuperIT\agent\superit-agent.exe exists

Remove leftover data

Skip this if you plan to reinstall the agent on the same device into the same team: the leftover files let it keep its configuration and identity.

Remove it when decommissioning a device, or before reinstalling into a different team, because a reinstall otherwise reuses the old identity and credentials. The script's -RemoveData switch does all of this; to do it by hand, from an elevated prompt:

1. Delete the data directory (configuration, identity.json, logs, command history):

   Remove-Item -Path "C:\ProgramData\SuperIT" -Recurse -Force

2. Remove the install key environment variable, if you set one while troubleshooting:

   [Environment]::SetEnvironmentVariable('SUPERIT_INSTALL_KEY', $null, 'Machine')

3. Delete the stored credential superit:operational. The agent runs as SYSTEM and keeps it in SYSTEM's Credential Manager, so this has to run as SYSTEM, for example through your RMM tool, Intune, or psexec -s:

   cmdkey /delete:superit:operational

Remove the device from SuperIT

Uninstalling the agent stops it reporting, but the device stays in your team, shown as offline. To remove it, log in to app.superit.ai, go to Devices and remove the device from your team.

Verify removal

sc query SuperIT

Get-Service "SuperIT*"

$app = Get-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*',
                        'HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*' |
       Where-Object DisplayName -eq 'SuperIT Agent'
msiexec /x $app.PSChildName /quiet /norestart /l*v "$env:TEMP\superit-uninstall.log"

Next Steps: To install the agent again, follow the installation guide.