Removing the KACE agent from a Mac is often necessary when a device leaves your organization or you need to reimage the machine. This process requires careful preparation to avoid leftover configurations or security gaps.
Follow this guide to fully uninstall the KACE endpoint component, verify clean removal, and document each step. The structured table and sections below help you complete the task accurately and safely.
| Phase | Action | Command or Location | Verification |
|---|---|---|---|
| Preparation | Back up critical data | Time Machine or cloud sync | Confirm backup integrity |
| Stop services | Halt KACE agent processes | sudo launchctl unload | ps aux check |
| Uninstall | Run official uninstaller | /Library/Application Support/KACE/...uninstall.sh | Confirm exit code 0 |
| Cleanup | Remove configurations and caches | /Library/Preferences and /Library/Application Support | Search for KACE files |
| Validation | Verify removal and reboot if needed | launchctl list | grep kace | Network logs clean |
Pre Uninstall Preparation
Before you remove the KACE agent, secure user data and understand the impact on monitoring. Preparation reduces the risk of configuration loss or service disruption.
Document Current Settings
Record the KACE agent version, policy assignments, and custom configurations. Store this information in a secure location so you can restore it if the device returns to your environment.
Coordinate With End Users
Inform users about maintenance windows and expected downtime. This minimizes surprise and supports smoother transitions, especially for shared workstations.
Stopping KACE Agent Services
Stopping active services prevents errors during file deletion and ensures a controlled uninstall sequence. Use privileged commands to release locks safely.
Launch Daemons and Agents
KACE typically runs as a launchd daemon on macOS. Identify the exact service name with sudo launchctl list and confirm it is loaded before proceeding.
Graceful Shutdown
Use sudo launchctl unload to stop the daemon, avoiding forceful process termination. This step reduces the chance of corrupted logs or incomplete cleanup.
Running the Official Uninstaller
The vendor provides an uninstaller script that cleanly removes binaries, policies, and registration data. Always execute the official method before manual file deletion.
Access the Uninstaller
Locate the script under /Library/Application Support/KACE or similar paths. Run it with admin privileges and capture the exit code for troubleshooting records.
Review Uninstall Output
Analyze the console output for warnings or failed deletions. Take screenshots or save logs to help the security or audit team review the change.
Manual Cleanup and Configuration Removal
After the uninstaller finishes, manually delete leftover preferences, caches, and support files. This step ensures no local credentials or network settings remain active.
Search Key Locations
Examine /Library/Preferences and /Library/Application Support for folders or plist files containing KACE or similar identifiers. Use sudo find to list and review these items systematically.
Confirm No Background Processes
Run ps aux | grep kace to detect lingering processes. If any appear, terminate them with sudo kill and confirm they do not respawn after a short delay.
Secure Cleanup and Future Management
Finalize the removal by securing sensitive files and establishing a repeatable process for future device changes. Consistent cleanup supports compliance and reduces audit effort over time.
- Back up essential user data before stopping services
- Stop and unload KACE launchd daemons with sudo launchctl
- Run the official uninstaller and capture logs
- Manually delete configurations in /Library/Preferences and /Library/Application Support
- Verify removal by checking processes and network settings
- Document steps and version details for future re-enrollment
Final Verification and Ongoing Oversight
Ongoing oversight ensures that removed components do not reappear and that endpoints remain consistent with policy. Schedule periodic audits to validate device posture and keep inventories accurate.
FAQ
Reader questions
How do I confirm the KACE agent is fully removed?
Run sudo launchctl list | grep kace and verify no matching entries appear. Additionally, search for KACE-related files in /Library/Preferences and /Library/Application Support, and ensure no processes appear in top or activity monitor.
Will removing the agent affect my Mac's network settings permanently?
Typically the uninstaller clears only settings it introduced, such as MDM payloads or proxy configurations. Review System Preferences > Network and Directory Access after removal to confirm no leftover entries remain.
What if the uninstaller fails or returns an error code?
Capture the error code, save the uninstall log, and restart the agent service if possible. If the issue persists, consult the vendor documentation for supported macOS versions and known compatibility issues before retrying.
Can I reinstall the KACE agent on the same Mac later?
Yes, you can reinstall if the device is re-enrolled properly. Ensure prior configurations are documented and that the new agent version is compatible with your current management policies and macOS build.