Uninstalling the Okta Active Directory (AD) Agent from a Windows Server requires removing the program via the Windows Control Panel, deleting the agent configuration data from the hard drive, and deactivating the agent in the Okta Admin Console. For older agent versions, this process also involves revoking the API token. This process completely removes all configuration data and log records from the host server.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Directories
• Active Directory (AD)
• Okta AD Agent

What are the steps to uninstall the Okta Active Directory Agent from a Windows Server?

Uninstall the Okta AD Agent by removing the application from the Windows Control Panel and deleting the local Okta AD Agent folder to clear configuration data and logs.

1. In Windows, navigate to Start > Control Panel > Programs > Programs and Features.
2. Select the Okta AD Agent, and then select Uninstall.
3. Navigate to C:\Program Files (x86)\Okta and delete the Okta AD Agent folder to remove the agent configuration data from the hard drive.
   • Deleting this folder removes all log records for the agent stored in C:\Program Files (x86)\Okta\Okta AD Agent\logs. Move these files to another location before deletion to retain the log records.
   • For agent versions 3.17 and earlier, the API token for the server remains valid in Okta until the agent is removed from the dashboard, making it important to remove the local configuration data.

Remove the Okta Active Directory Agent From the Okta Admin Dashboard

Deactivate and delete the agent in the Okta Admin Console to remove it from the dashboard by following the steps mentioned in the Remove an Okta AD Agent from the Okta Admin Dashboard documentation. For Okta AD Agent versions 3.17 and earlier, these steps also revoke the API token.

NOTE: The AD Agent version 3.18 or above uses the OAuth 2.0 flow instead of an API token.

Related References

• Remove an Okta AD Agent from the Okta Admin Dashboard
• Okta Active Directory Agent Changes Using OAuth 2.0