Manually stop agent processes not halted when using an authorization token to terminate the program.
![]() |
NoteThis FAQ is about how to manually terminate agent processes when using the agent interface
to shut down the Trend Vision One Endpoint Security agent on a Windows endpoint. For
information about shutting down the agent, see Agent Interface.
For steps on restarting the agent and agent services, see How to restart the Trend Vision One Endpoint Security agent.
Some services might require disabling the feature in Endpoint Security Policies before
shutting down the agent.
|
Procedure
- Disable protection features which control the affected services before terminating
the agent program.
- In Endpoint Security Policies, disable the following protection features:
-
Firewall
-
Intrusion Prevention
-
Web Reputation
-
- Go to Agent Interface and set Browser extension to Disable.
- Save the policy settings.
- In Endpoint Security Policies, disable the following protection features:
- Allow time for the agents to update the policy settings, then terminate the agent program using the agent interface.
- Terminate
tm_netsrv
manually.- Once the agent program is successfully terminated, access Task Manager.
- Locate and select
tm_netsrv
. - Click End task.
- To terminate
dsa-wrs-app.exe
manually, exit all Chrome and Edge browser sessions. - Terminate the
tbimwfp
driver.- Access Command Prompt as an administrator.
- To verify the status of the driver, use the command sc query tbimwfp.
- If the driver is running, use the command sc stop tbimwfp.
- Uninstall the
tbimdsa
driver.Thetbimdsa
driver cannot be stopped using commands. The driver must be uninstalled to stoptbimdsa
from running.- Go to .
- Locate the network interface.
- Right click and select Properties.
- In the list The connection uses the following items, locate and select Trend Micro LightWeight Filter Driver.
- Click Uninstall.
- In the confirmation notice, click Yes.
- To verify the driver status, access Command Prompt as an administrator.
- Use the command sc query tbimdsa.If uninstalling is successful, the command returns the following error:
The specified service does not exist as an installed service.