Implementation Guide › Installing and Customizing a Windows Endpoint › Starting and Stopping CA Access Control › Stop CA Access Control

Stop CA Access Control

You use the secons utility to stop CA Access Control on local and remote computers. You do not require any specific Windows privileges to stop CA Access Control, but you must have the ADMIN or OPERATOR attribute in CA Access Control.

Note: You cannot stop CA Access Control while it is running from Windows Services Manager. You must use the secons utility to stop CA Access Control before you modify a CA Access Control service in Windows Services Manager.

To stop CA Access Control

1. Open a command prompt window and navigate to the directory containing the CA Access Control binaries.

   By default, the CA Access Control binaries are located at C:\Program Files\CA\AccessControl \bin.

2. Enter the following command:

   secons -s [hosts | ghosts]
   

   -s [hosts | ghosts]

   Shuts down the CA Access Control services on the defined, space-separated, remote hosts. If you do not specify any hosts, CA Access Control shuts down on the local host.

   You can define a group of hosts by entering the name of a ghost record. If you use this option from a remote terminal, the utility requests password verification. You also need admin privileges on both the remote and local computers, and write permission to the local computer on the remote host database.

   When you stop CA Access Control on a local computer, the following message appears:

   CA Access Control is now DOWN
   

   When you stop CA Access Control on remote hosts, CA Access Control reports whether the remote host shutdown was successful. An attempt is made to shut down each host on the list, even if the remote host preceding it was not shut down successfully.