You can remove security rights from users in several different ways. If you remove a user from the Microsoft System Center Configuration Manager 2007 rights list, you remove all assigned rights, and if you remove all assigned rights, you remove the user from the Configuration Manager 2007 rights list. You can also remove only select classes or instances but leave the user on the Configuration Manager 2007 rights list.
- You can use the Security tab of the
object properties to delete class or instance security rights.
- You can Delete the user from
Security Rights / Users to remove the user from the
Configuration Manager 2007 rights list.
- You can Delete the class or instance
from Security Rights / Rights to remove select
classes or instances.
- You can use the Manage ConfigMgr Users
Wizard to remove select rights from or to remove a user from
the Configuration Manager 2007 rights list.
 Note |
|---|
| You must have Modify permission for the Site security object class or instance to perform this procedure. |
 Caution |
|---|
| You should not remove or modify the Configuration Manager 2007 rights for the NT Authority\SYSTEM group. |
| Caution |
|---|
| If you remove the class security right, you also delete all instance security rights that the user has on that type of object. |
To delete a security right on the object properties
-
Right click the object you want to modify and then click Properties.
-
On the Security tab, select the Class Security Rights or Instance Security Rights and then click the delete button.
-
Click OK.
To delete a user from the security rights users list
-
In the Configuration Manager console navigate to System Center Configuration Manager / Site Database / Security Rights / Users.
-
Right-click the user and then click Delete.
-
In the Confirm Object Delete box, click Yes.
To delete the class or instance from the rights list
-
In the Configuration Manager console navigate to System Center Configuration Manager / Site Database / Security Rights / Rights.
-
Right-click the class or instance and then click Delete.
-
In the Confirm Object Delete box, click Yes.