Skip to content
Home » Help Center » Prixl Guard (Secure Access) guides » Revoke access, replace a laptop, re-invite

Revoke access, replace a laptop, re-invite

What you will do: remove a person’s Guard access when they leave or lose a laptop, move someone to a new laptop, and give a fresh invite to someone who needs one. All of it happens on the Secure Access tab of the Warden dashboard. Removing access frees the seat for someone else.

Time: about 2 minutes to revoke, about 15 minutes to replace a laptop. You need: the Warden dashboard on the server, opened with the desktop shortcut Prixl Warden Dashboard.

Revoke a person’s access

  1. Click Secure Access in the sidebar and find the Connected Peers table. Each row is one device that has used an invite, with the columns Client, Assigned IP and Action. The name is the one you typed when you created the invite.
  2. Click the red Revoke button on the person’s row.
  3. Confirm the message “The client will lose VPN access.”

The device is cut off when Warden next syncs with Prixl, usually within about a minute. Its seat is freed and your admin addresses get a “Peer Revoked” email. If the person also had their own Windows account on the server, disable that account too; revoking Guard only removes the network path.

You cannot revoke the last active peer

If only one device in your whole organisation still has Guard access (counting every Guard server you have, and whether or not it is connected right now), the dashboard refuses with “Cannot revoke the last active peer. Create a new peer first to avoid lockout.” This protects you from locking Remote Desktop down with nobody able to use Guard. Invite someone else, let them enter their code, then revoke the old one. If you want to stop using Guard altogether, use the contact form.

Revoking is also paused while your licence is frozen or expired. Renew first; see Trial, licence renewal and what happens at expiry.

Replace a laptop

There is no “move” button. You add the new laptop as a new device and then remove the old one. Do it in this order, because the old laptop may be the last active peer.

  1. Check the Remaining seat box. You need one free seat for a while, because both laptops hold a seat until you revoke the old one. If you have none, revoke someone who no longer needs access, or contact Prixl for more seats.
  2. Create a new invite for the person, with a name that tells the devices apart, for example “Priya – new laptop”. See Invite a staff member.
  3. On the new laptop, install Guard and enter the new code (see the staff guide). Check that Remote Desktop works over Guard.
  4. In Connected Peers, click Revoke on the old laptop’s row.

If the old laptop was lost or stolen, revoke it straight away and invite the new laptop afterwards, unless it is the only device with Guard access. In that case, invite and connect the new laptop first and revoke the old one immediately after.

Re-invite someone

  • The code expired or was never used: create a new invite. Cancel the old one in Pending Invites if it is still listed.
  • The person needs to set Guard up again on the same PC: create a new invite. On their PC they click the Guard icon, choose Reconfigure… and enter the new code. This does not remove their old entry: revoke the old row in Connected Peers yourself, or it keeps a seat. Each new code creates a new entry with a new address.
  • A second Windows user on the same PC: each Windows user needs their own invite and takes their own seat.
  • After Warden was reinstalled on the server: if the dashboard says your clients “may be on an old server key”, re-issue their invites (or update the Guard app) so they reconnect.

How seats are counted

  • One seat is one device that has used an invite code and has not been revoked.
  • Invites that are still pending do not use a seat.
  • Seats are shared across your whole organisation. If you have Guard on two servers, both draw from the same total.
  • The boxes Total Seats, In Use and Remaining at the top of the Secure Access tab show where you stand. For more seats, see pricing or contact Prixl.

Check it worked

  • The revoked device is gone from Connected Peers and its invite now appears under Revoked / Expired Invites.
  • The In Use count has gone down by one.
  • Your admin addresses received the “Peer Revoked” email.

If something goes wrong

  • “Cannot revoke the last active peer”: invite another device and have it enter its code first, as described above.
  • “All N of M Guard seats are in use across your whole organisation…” when inviting: revoke an unused device. The message names the least recently used one to help you choose.
  • More: Troubleshooting Guard.

Next

Previous: Lock Remote Desktop to Secure Access only. Next: Change the connection method. Back to Prixl Guard (Secure Access) guides.