Manually removing agents on IIS
Manually remove the agent if an attempt to remove the agent from a system fails.
Steps
-
Stop Microsoft IIS:
-
Run the command
net stop w3svc
. -
Run the command
net stop was
.
-
-
Edit
C:\Windows\System32\inetsrv\config\applicationHost.config
and remove the following line from thesectionGroup
container withname=system.webServer
underconfigSections
.Example:
<section name="paa" overrideModeDefault="Deny" allowDefinition="AppHostOnly" allowLocation="false" />
-
Remove the following XML block from the
<system.webServer>
element inC:\Windows\System32\inetsrv\config\applicationHost.config
.Example:
<paa> <paaCertificateDir value="C:\Program Files\Ping Identity\PingAccess Agent for IIS\certs\" /> <paaPropertyFiles> <file path="C:\Program Files\Ping Identity\PingAccess Agent for IIS\agent.properties" /> </paaPropertyFiles> </paa>
-
Open IIS Manager and go to Management → Configuration Editor.
-
Select the
system.webServer/paa
section and validate that the paths were properly removed fromapplicationHost.config
. -
Deregister the agent module with IIS.
-
Open IIS Manager, and then select the web server from which the agent is being removed.
-
Click Modules.
-
Click Configure Native Modules.
-
Select the
PingAccessAgentModule
registered module, and then click Remove. -
Click OK.
-
Run the command
iisreset /restart
.
-