Unable to Remove User from User Structure

Hi,

We are having trouble removing a user from the system.

System has been upgraded from v5.1 RevD FP4 to v6.0. As a part of the project we are also doing some housekeeping to the system by removing unnecessary objects.

One of these objects is a User that hasn't existed in a while. User isn't part of the windows domain. In 800xA system the user is a part of the IndustrialITAdmin and IndustrialITUser groups.

When trying to delete/remove this user from either group, we get an error:

"[Error] Operation rejected by Adminstrators - <domain>\IndustrialITAdmin:User Group Definition (Structure hook: Child remove) Transaction Cancelled"

We would appreciate your help on this matter.

-PTe

Comments (0) New comment

PTe Rank: 220

Asked 5 years ago

Answer this question Follow

Answers

Have you tried to use the "Configuration Wizard" and/or the "Configuration Console".
Maybe one of these 2 tools are able to remove the users!

Reinhard

Comments (1) New comment

reinig Rank: 55

Answered 5 years ago

The service account and account used to create the system becomes with a special protection (aspect key) that prevent them from being removed.

After backup/restore you may want to purge old accounts, eg old service account. This requires you to remove a key on (I believe) the User Structure aspect's Details... window (I believe second tab).

I can't remember the key name or aspect having it right now in my sofa at home, but something like "Service user", etc. Compare with other accounts and you will notice the aspect key. If not the User Structure aspect, try the User Definition aspect.

Likewise, you can add this key to other accounts to prevent them from accidental removal.

Comments (0) New comment

Stefan Stromqvist AKS expert

Rank: 1

Answered 5 years ago

I have the same problem. Restore a system domain to a computer without the domain . Please give an example of how the Domain users can be deleted , especially the service user . Thanks in advance.

Comments (4) New comment

nola2k Rank: 39

Answered 5 years ago

Hi,

According to Stefans instructions, a certain aspect key must be removed from the old Service user.

The aspect key can be found by navigating in the user structure to the affected user, select aspect user definition, look at aspect details tab Aspect info and remove the key "Service User". After removing the aspect key, the user can be removed from the system.

We have not yet tested this, but I beleieve this is what Stefan was reffering to.

See attachment.