Hey River1,maybe following ppreenja  directions.  I came to the company I am at now, they had Cisco AMP install but the company was sold and no longer had access to the Cisco AMP Console..I even open a ticket with Cisco and they told me to get in tou...

I found out that you have to boot in safe mode. after in safe mode open Notepad with admin rights.Go to: C:\Program Files\Cisco\AMPGo to policy.xml, found the following tabs: <passwordex></passwordex>  Delete everything from the start of <passwordex>...

Hi Pratham,What do you do if the company has been sold and you cant access the Endpoint Console?  is there a way to just remove it without having the password or Endpoint Console? Thanks,Lance