Windows Local group Deprovisioning

[chandramohans27 (Chandra Mohan S)]

Hi,

I’m trying to do access revoke for an user who has access to local group on Windows server through certification. But remove entitlement failed. When I looked in to IQservice, I see the below error. But I see the user is still present on the local group.

IQtrace debug:

<>
Exception occurred while provisioning group WinNT://testserver1/Users,group, Exception has been thrown by the target of an invocation.InnerException:A member could not be added to or removed from the local group because the member does not exist.
Or it might be non-local user

[rahul_patel]

@chandramohans27

Or it might be non-local user

The connector does not support provisioning of non-local group membership. However you can read it by setting disableNonLocalLookup entry to false in application.

[chandramohans27 (Chandra Mohan S)]

@rahul_patel

Thanks for your reply.

But I’m trying to deprovision a local user from windows local group. But that too got failed with same error message.

Also could you please help me with options to deprovision non-local users on windows server.