Un-enrolling a User
Remove an Individual MFA Option
Ensure you are a member of the “Specops Service Desk Agents” security group, which can be done from Active Directory settings tab in the gatekeeper or directory from Active Directory Users and Computers.
If you want to un-enroll a user from an individual identity service, you would click on Enrollment:
and then from the next screen you would have the ability to remove any of the listed identity services or remove them all:
Completely un-enroll a user
*Please note doing this will not remove any auto enrolled methods such as email or mobile code.
This can be done by deleting the leaf object under the user in Active Directory. You can do this by ensuring the following settings are enabled:
After the settings are enabled, locate the user you would like to delete the enrollment data for and expand the user object and delete the SpecopsAuthentication leaf object:
Once either option is done, the user will then have to re-enroll in the identity services:
