# Failed install endpoint service: exit status 284 **URL:** \ **Category:** Endpoint Security\ **Created:** [June 26, 2025, 7:52am UTC](https://discuss.elastic.co/t/failed-install-endpoint-service-exit-status-284/379504 "2025-06-26T07:52:19Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![ArgoAdvisory](https://avatars.discourse-cdn.com/v4/letter/a/f4b2a3/32.png) [@ArgoAdvisory](https://discuss.elastic.co/u/ArgoAdvisory)\ **Post date:** [June 26, 2025, 7:52am UTC](https://discuss.elastic.co/t/failed-install-endpoint-service-exit-status-284/379504/1 "2025-06-26T07:52:19Z")
Hello everyone, I am having this problem. I tried to uninstall Elastic Defend from a computer, but I can't... These are the things I tried: - uninstall the agent: the agent is uninstalled successfully but the "Elastic Endpoint" service remains active - move the computer to a policy without Elastic Defend, but nothing changes - tried to kill the process as administrator and as system32, but Elastic Endpoint is not uninstalled I want to completely uninstall Elastic Agent and Elastic Endpoint from my computer. Elastic Agent is uninstalled successfully but there is no way to uninstall Elastic Endpoint. So... I also tried to reinstall the agent with Elastic Defend policy and I got the error in the image. ![elastic-defend problem](https://us1.discourse-cdn.com/elastic/original/3X/6/4/64666e02b8c8f836e7bcdcf9774e12fd72e7ab4e.png) Any idea how to completely remove Elastic Agent and Elastic Endpoint? Thanks in advance! ---
**Author:** ![ArgoAdvisory](https://avatars.discourse-cdn.com/v4/letter/a/f4b2a3/32.png) [@ArgoAdvisory](https://discuss.elastic.co/u/ArgoAdvisory)\ **Post date:** [June 26, 2025, 10:10am UTC](https://discuss.elastic.co/t/failed-install-endpoint-service-exit-status-284/379504/2 "2025-06-26T10:10:53Z")
Update. I have no idea if this is a solution that will work for everyone. Status: I tried uninstalling the Elastic Agent with Elastic Defend integration. Elastic Agent was installed but Elastic Endpoint was not. Update: I re-installed the policy and then did uninstall via powershell. And it worked. I no longer have Elastic Agent and Elastic Endpoint on my computer ---
**Author:** ![NickFritts](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nickfritts/32/47189_2.png) [@NickFritts](https://discuss.elastic.co/u/NickFritts)\ **Post date:** [June 26, 2025, 10:24am UTC](https://discuss.elastic.co/t/failed-install-endpoint-service-exit-status-284/379504/3 "2025-06-26T10:24:18Z")
Hi @ArgoAdvisory Did you have tamper protection enabled in your agent/endpoint policy? ---
**Author:** ![ArgoAdvisory](https://avatars.discourse-cdn.com/v4/letter/a/f4b2a3/32.png) [@ArgoAdvisory](https://discuss.elastic.co/u/ArgoAdvisory)\ **Post date:** [June 26, 2025, 2:12pm UTC](https://discuss.elastic.co/t/failed-install-endpoint-service-exit-status-284/379504/4 "2025-06-26T14:12:02Z")
> [@NickFritts](#): > > ave tamper protection enabled in your agent/endpoint policy? hi @NickFritts yes, I have tamper protection enabled. Maybe I know what you mean: I know that to uninstall Elastic Endpoint you need the token. The main problem is that initially I didn't want to uninstall it, I just wanted to disable it by putting the agent in a policy without Elastic Defend. **But when I moved the agent to this new policy, the Elastic Endpoint service continued to run.** So I tried to uninstall it, but without success. So I move again the agent to the old policy, and then I uninstalled everything via powershell with the token. I hope I was clear, if you want more information I'm at your disposal. Thank you! ---
**Author:** ![lesio](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lesio/32/89323_2.png) [@lesio](https://discuss.elastic.co/u/lesio)\ **Post date:** [June 26, 2025, 3:28pm UTC](https://discuss.elastic.co/t/failed-install-endpoint-service-exit-status-284/379504/5 "2025-06-26T15:28:28Z")
@ArgoAdvisory please note that the Endpoint service also has command line interface, therefore you could just uninstall such stray Endpoint with the uninstall token. > **[Endpoint command reference | Elastic Docs](https://www.elastic.co/docs/reference/security/endpoint-command-reference)** > > This page lists the commands for managing and troubleshooting Elastic Endpoint, the installed component that performs Elastic Defend's threat monitoring... As for the situation, one of the two should hold: - Agent should not allow you to move to policy without Endpoint (Defend) if Tamper Protection is enabled - Agent should remove Endpoint when moving to policy without Endpoint (whether Tamper Protection is enabled or not) Thank you for reporting the issue. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 24, 2025, 3:28pm UTC](https://discuss.elastic.co/t/failed-install-endpoint-service-exit-status-284/379504/6 "2025-07-24T15:28:56Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.