locked
Removing ATA RRS feed

  • Question

  • How do I remove this? There is no option in appwiz.cpl!
    Monday, February 13, 2017 8:56 AM

All replies

  • You can remove it via Programs and Features
    Monday, February 13, 2017 9:29 AM
  • Hello,

    You can remove it from Control Panel\Programs\Programs and Features.

    You can just double click the program named ATA Advanced Threat Analytics Center.




    Best regards,
    Andy Liu

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, February 14, 2017 2:18 AM
  • The 'Programs and Features' uninstall doesn't work.  The first time I ran it, it reinstalled itself.  Now it just says that ATA is already running.  Any other ideas?
    Wednesday, February 15, 2017 8:03 AM
  • Hello,

    What's the OS version, on which the ATA is running? For example, Windows Server 2012R2 or Windows Server 2016.

    In addition, could you please check the log files located at the location below.

    C:\Users\<Current-User-Name>\AppData\Local\Temp


    Best regards,
    Andy Liu


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, February 15, 2017 8:38 AM
  • Hi Andy,

    My ATA is version 1.7.5757.57477 installed on 2008 R2.

    The log from when I tried to uninstall this morning starts with:

    [1AFC:06F0][2017-02-15T08:01:42]i001: Burn v3.10.3.3007, Windows v6.1 (Build 7601: Service Pack 1), path: C:\ProgramData\Package Cache\{e30e2e7d-94ea-447e-aa7d-a4bb2a899ebe}\Microsoft ATA Center Setup.exe
    [1AFC:06F0][2017-02-15T08:01:42]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
    [1AFC:06F0][2017-02-15T08:01:42]i009: Command Line: '"-burn.clean.room=C:\ProgramData\Package Cache\{e30e2e7d-94ea-447e-aa7d-a4bb2a899ebe}\Microsoft ATA Center Setup.exe" -burn.filehandle.attached=224 -burn.filehandle.self=232 /burn.log.append "C:\Users\7637a\AppData\Local\Temp\Microsoft Advanced Threat Analytics Center_20170214160115.log"'
    [1

    and ends:

    [1AFC:06F0][2017-02-15T08:01:57]i199: Detect complete, result: 0x0
    [1AFC:102C][2017-02-15T08:01:57]i000: 2017-02-15 08:01:57.3652 6908 5   Debug [\[]DeploymentModel[\]] [\[]DeploymentAction=Reinstall[\]]
    [1AFC:102C][2017-02-15T08:01:57]i000: 2017-02-15 08:01:57.9424 6908 5   Error [\[]CenterBootstrapperApplication[\]] Microsoft Advanced Threat Analytics Center 1.7.5757.57477 is already installed

    Can't see anything else in the logs that looks relevant.

    Thanks.

    Wednesday, February 15, 2017 5:54 PM
  • Hello,

    ATA Center only supports installation on a server running Windows Server 2012 R2 or Windows Server 2016. It's weird it can be installed on Windows Server 2008 R2. 

    In my lab, if the installation is performed on Windows Server 2008 R2, ATA installer will pop up a message dialog, which says operating system is not supported.

    To remove the program, you may try the tool below.

    https://support.microsoft.com/en-us/help/17588/fix-problems-that-block-programs-from-being-installed-or-removed

    Best regards,

    Andy Liu


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, February 16, 2017 9:11 AM
  • Hi Andy,

    Thanks for the link.  It didn't pick up my ATA installation and giving it the product code didn't help either, but I've deleted the registry key so it's not appearing in Programs and Features any more.  The software didn't install properly, presumably because of the OS, but having it lurking in the list of installed applications was annoying.

    Regards,

    Mungus

    Thursday, February 16, 2017 11:15 AM
  • Hello Mungus,

    That's great that it's removed from the Programs and Features, and I would recommend to disable the ATA service if it's still running.

    Best regards,

    Andy Liu


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, February 20, 2017 9:58 AM