Uninstall the module

To stop using SCE, you can uninstall the sce_windows module. Alternatively, to stop using SCE on one or more nodes, you can declassify the nodes to remove their association with the sce_windows class.

If you uninstall SCE or declassify one or more nodes, Puppet Enterprise (PE) or Puppet Core no longer runs on the affected nodes to enforce Center for Internet Security (CIS) compliance. When you uninstall SCE or declassify a node, the node does not revert to its pre-SCE state.

Take one of the following actions:

To uninstall the SCE module, follow the instructions in Uninstalling modules.
On PE, to declassify nodes, you can remove the nodes from the node group that is associated with the sce_windows class. For instructions, see Remove nodes from a node group. Alternatively, to stop using SCE on an entire node group, you can remove the sce_windows class from the node group. For instructions, see Remove classes from a node group.
On Puppet Core, ensure that sce_windows is no longer included in the manifest that applies the sce_windows class.