Follow these steps to manually and permanently remove ChangeAuditor Agent from a Domain Controller or member server:
- Open Windows Services
- Stop the Quest ChangeAuditor Agent service
- Stop the Quest ChangeAuditor Windows File System service (if present)
- Open a Command prompt "As Administrator" and run the following commands:
- sc DELETE NPSrvHost
- sc DELETE CAWFS (if present as a service above)
- sc DELETE "Quest ChangeAuditor for Exchange" (if present as a service above)
- Refresh Windows Services and verify the services have been removed
- Remove the following registry key. Where is the key that has the ProductName subkey listed as "Quest ChangeAuditor Agent 5 (x64)" (Click on each key to find the one with this product name):
- Remove the following registry key. Where is the key that has the Display name Value as "Quest ChangeAuditor Agent 5 (x64)" (Click on each key to find the one with this product name):
- Delete the folder "C:\Program Files\Quest Software\ChangeAuditor".
Quest does not provide support for problems that arise from improper modification of the registry. The Windows registry contains information critical to your computer and applications. Make sure you back up the registry before modifying it. For more information on the Windows Registry Editor and how to back up and restore it, refer to Microsoft Article ID 256986 “Description of the Microsoft Windows registry” at Microsoft Support.