The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

Using an unlock code to uncontain a Windows host

  • Published on Sep 10, 2026
  • 1 minute(s) read
Prev Next

This section describes how to use the unlock code to uncontain your Windows host.

To use an unlock code to remove a Windows host from containment:

  1. Log in to the contained Windows host.

  2. Open Command line prompt and use the cd command to change to the C:\Windows\FireEye C:\Windows\Trellix\XClient\uncontain.exe directory:

    cd C:\Windows\FireEyecd C:\Windows\Trellix\XClient\uncontain.exe

  3. Run the uncontain executable file with the unlock code:

    uncontain.exe <unlock code>

: