Deleting CSA on a desktop

[jwjorgensen]

I installed an agent kit to my laptop to test a group setup and now when i try to uninstall it from my pc a message pops up saying that the csa service can not be stopped. I tried to find my host in the CSA MC but i could not. Has anyone ran across this issue?

[joemitch]

The agent service control rule needs to be configured to either query the end user or set as an explict allow. So most likely, there is an agent service control rule that is set to query - default deny (and it was once denied and thus cached), or the agent service control rule was set to an explict deny.

try clearing the agent Cache, or else you will have to remove the agent after booting up into safe mode if you cannot get the agent to register with the CSA MC.

[jwalker]

The best way to do this is to boot into Safe Mode. Then stop the agent service in the command prompt using "net stop csagent". After the agent is stopped, use the add/remove programs tool in the Control Panel to get rid of it....

[RichardSW]

Are you able to manually stop the Cisco Security Agent service? If so, stop it first, then Uninstall it.

[jwjorgensen]

I was not able to stop the service. I had to boot into safe mode and then I was able to stop the service and uninstall.