Uninstalling the Netskope Client

This section describes various options to uninstall the Client from end-user devices.

Uninstall Client in macOS

The following options list the steps to uninstall Netskope Client in your macOS device:

Create a shell script (for example, uninstall.sh) using the following command and execute it on the user’s device to uninstall the Client.

#!bin/bash
/Applications/Remove\ Netskope\ Client.app/Contents/MacOS/Remove\ Netskope\ Client uninstall_me exit

To uninstall using a password, use the following command:

#!/bin/bash
/Applications/Remove\ Netskope\ Client.app/Contents/MacOS/Remove\ Netskope\ Client uninstall_me <password in plain text> exit

Option 3

The following section describes the instructions to uninstall Netskope Client using various MDMs.

Use the jamfuninstall_v2.sh script available for download as part of JAMF scripts in the Downloads section of the Support portal. When using this script for uninstalling, enter your password as the fourth parameter in the script  in the JAMF policy using the set command below:

set -- 0 0 0 <yourUninstallPassword>

Jamf

This section describes the steps to uninstall Netskope Client in macOS devices using Jamf.

Configuration Profile and Policy

Perform the following instructions to mark the system extension as removable: 

1. In JAMF, go to Computers > Configuration Profiles > New.

2. Provide a Name for the Configuration Profile. 

3. Select System Extensions > Configure.

4. Select Allow users to approve system extensions.

5. Under Allowed Team IDs and System Extensions, select System Extension Types as Removable System Extensions.

6. Add Network Extension Team ID: 24W52P9M7W

7. Click Add to include the following System Extension: com.netskope.client.Netskope-Client.NetskopeClientMacAppProxy

8. Click Save under Removable System Extensions. 

9. Click Save in the bottom right to save the Configuration Profile.

Once the Configuration Profile is configured, you must upload and configure the uninstall script in a Policy.  Refer to Scripts  for instructions to add a script. After you upload the script:

1.  Go to Computers > Policies > New.

2.  Give the Policy a name. 

3.  Select Login  for the trigger and the frequency as Once per computer.  You can optionally configure a different trigger if you’d like the script to run sooner or at a different interval.

4.  Click Scripts > Configure.

5.  Click Add on the uninstall script you uploaded.

6.  Click Save.

   You can now assign the Configuration Profile and Policy to users and computers in JAMF.  It is recommended to use a Smart Group or ensure you remove users and computers from the Configuration Profile and Policy that are configured to install the client.

Intune

This section describes the steps to uninstall Netskope Client in macOS devices using Intune.

Create Configuration Profile

Perform the following instructions to mark the system extension as removable: 

1. In Intune, go to Devices > macOS > Configuration Profiles > Create > New Policy.

2. Select macOS under Platform and Settings catalog under Profile Type.

3. Click Create.

4. Under Basics, provide a name for the profile.

5. Click Next.

6. Under Configuration Settings, click +Add settings.

7. In the Settings Picker window, select System Configuration > System Extensions.

8. Select the checkbox for Removable System Extensions. 

9. Go to Configuration Settings on the left-pane and click +Edit Instance.

   

10. Enter the following:

    • Removable System Extensions name: com.netskope.client.Netskope-Client.NetskopeClientMacAppProxy

    • Team Identifier: 24W52P9M7W

11. Click Save.

    

12. Click Next to continue.

13. Provide Scope tags(optional).

14. Click Next to continue.

15. In Assignment, Add user or device assignments to uninstall the Netskope client. 

16. Click Next to continue.

17. In Review+Create, you can review the policy configurations.

18. Click Create.

    Run Uninstall Script

    Once the Removable System Extension policy is configured, you must upload and configure the uninstall script. Refer to Shell Scripts for instructions to add a script. Intune does not support passing parameters to the script and hence you must add a set command to the script.

    Perform the following instructions to run the uninstall script:

    1. In Intune, go to Devices > macOS > Shell scripts.

    2. Click +Add.

    3. In Basics, enter a Name and Description.

    4. Click Next.

    5. In Script Settings, select to upload the uninstall script  from your local storage in your computer. Make the following changes:

       • Run script as signed-in user – No

       • Hide script notifications on devices – Not configured

       • Script frequency – Not configured

       • Max number of times to retry if script fails – Not configured

         

         Selecting Not Configured for all other parameters implies that the script runs only once.

         Include set -- 0 0 0 <yourUninstallPassword> in the script to unsintall using password parameter.

    6. Click Next.

    7. Assign proper groups based on user or Devices by clicking Add groups and checking the box next to the appropriate groups.

    8. Click Select. 

    9. Click Next to continue.

    10. Click Add.  

Kandji

Kandji does not support marking system extensions as removable. The steps provided for the Netskope install allow for any extension type from the Netskope team identifier. 

Perform the following instructions to run the uninstall script:

1. In Kandji, go to Library.

2. Click +Add new. 

3. Click Custom Scripts > Add & Configure. 

4. Select the Blueprint you want to uninstall clients.  

5. In ExecutionFrequency, select the option: Run once per device.

6. Enter the following script in the Audit Script text box:

   

   #!/bin/bash
   #script for installing NSAgent on OSX machines
   #will check to see if Netskope is Installed
   function Test_NSClient(){
   xz=$(/usr/bin/mdfind kMDItemFSName == Netskope Client.app -onlyin /Library/Application\ Support/)
   if [ -e "$xz" ]; then
       echo "$xz found netskope client is installed"
   exit 1
   else
       echo "client does not exist"
   exit 0
   fi
   }
   Test_NSClient
   #end script

7. Click +Add Remediation Script.

8. Paste the contents of the uninstall script you configured with the set command in the Remediation Script field.

9. Click Save. 

Workspace One

This section describes the steps to uninstall Netskope Client for macOS devices using Intune.

Add Removable System Extension

Workspace One supports Removable System Extensions and smart groups with exclusions. Perform the following instructions to mark the system extension as removable: 

1. Go to Resources > Profiles & Baselines > Profiles.

2. Click Add.

3. Click Add Profile from the Add dropdown options.

4. Select Apple macOS from the platform list.

5. Select Device Profile in Select Context.

6. Provide a name for the profile. 

7. Start typing ‘System’ in the search text box of the configuration profile.

8. Expand System Extensions option and click Add.

9. Configure Removable System Extensions as follows:

   • Team Identifier: 24W52P9M7W

   • Bundle Identifier: com.netskope.client.Netskope-Client.NetskopeClientMacAppProxy

     

10. Click Next.

11. Assign the profile to a Smart Group and necessary exclusions.  This structure will depend on your environment.

12. Click SAVE & PUBLISH. 

    Run Uninstall Script

    Once the Removable System Extension policy is configured, you must upload and configure the uninstall script.  Follow the steps below to use the Scripts functionality of WorkSpace One.  WorkSpace One also supports Files/Actions which allows for more granular scheduling based on specific triggers such as Logon or recurring checking. 

    1. Go to Resources > Scripts.

    2. Click ADD > macOS.

    3. In General, provide a Name for the uninstall script. 

    4. Click NEXT.

    5. Click UPLOAD and select the file you have configured with the uninstall password.

    6. Click NEXT.

    7. Click SAVE.

    8. Select the script that you previously uploaded and click ASSIGN. 

    9. Click NEW ASSIGNMENT.

    10. Enter a name for the Assignment.

    11. Select a SmartGroup for uninstall based on the devices or users that need the client uninstalled.

    12. Click NEXT. 

    13. Select the deployment trigger.  You can select Run Once Immediately if you want the script to push immediately. 

    14. Click ADD. 

Uninstall Client in Windows

Option 1

Use the Add or Remove Programs option in the Windows control panel to uninstall the Client.

Option 2

Microsoft Endpoint Configuration Manager

@echo off
REM
REM This batch file is used to uninstall Password protected Netskope Client from SCCM
REM
SetLocal
for /f "tokens=2 delims==" %%f in ('wmic product where "Name like 'Netskope Client'" get IdentifyingNumber /value ^| find "="') do set "productCode=%%f"
IF DEFINED productCode (    
     msiexec /uninstall %productCode% PASSWORD="<password in plain text within quotes>" /qn /l*v %PUBLIC%nscuninstall.log   
     ) ELSE (    
REM Did not find product code for Netskope Client
)
EndLocal

Microsoft Group Policy Object(GPO)

Uninstalling can be done through GPO using a batch script similar to installation. The uninstallation script is:

wmic product where name="Netskope Client" call uninstall

Uninstall Client in Linux

Use the command sudo /opt/netskope/stagent/uninstall.sh to uninstall Netskope Client in Linux.