Agents that where deploy through Domain Watch in discovery are deleted but after the endpoints are restarted the agents return
When agents are deployed through Domain Watch its done with an automatically created GPO that every time the endpoint is restarted if an agent does not exist the GPO creates one.
- In Active Directory, locate the Features > Group Policy Management > <forest> > Domains <domain> > Group Policy Objects folder.
Right-click the ADAgentDeployGPO group policy object and select the Delete option.
- Delete the agent via Agent --> Delete --> delete the agent at next check-ins