Windows Local group Deprovisioning

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi,

I’m trying to do access revoke for an user who has access to local group on Windows server through certification. But remove entitlement failed. When I looked in to IQservice, I see the below error. But I see the user is still present on the local group.

IQtrace debug:

<>
Exception occurred while provisioning group WinNT://testserver1/Users,group, Exception has been thrown by the target of an invocation.InnerException:A member could not be added to or removed from the local group because the member does not exist.
Or it might be non-local user

2

The connector does not support provisioning of non-local group membership. However you can read it by setting disableNonLocalLookup entry to false in application.

3

@rahul_patel

Thanks for your reply.

But I’m trying to deprovision a local user from windows local group. But that too got failed with same error message.

Also could you please help me with options to deprovision non-local users on windows server.