Unmapping AD users and groups

Similar to mapping, it is possible to unmap users and groups using Crystal Enterprise.

To unmap AD groups using Crystal Enterprise

1. Go to the Authentication management area of the CMC.
2. Click the Windows AD tab.
3. In the "Mapped AD Member Groups" area, select the AD group you would like to remove.
4. Click Delete.
5. Click Update.

   The users in the deleted group will no longer be able to access Crystal Enterprise.

   Tip:    To deny AD authentication for all users, clear the "Windows Active Directory Authentication is enabled" check box and click Update.

   Note:    The only exceptions to this occur when a user has an alias other than the one assigned for AD authentication, or if your implementation allows users to create their own accounts through the sign-up feature. To restrict access, disable or delete the user's Enterprise account and disable the ability for guests to add users anonymously. For more information, see Managing Enterprise and general accounts.

To unmap AD users using Crystal Enterprise

1. Go to the Users management area of the CMC.
2. Click the name of the user whose account you want to unmap.
3. On the Properties tab, for the user's AD alias clear the Enabled check box.
4. Click Update.

   This user can no longer log on using AD authentication. To further restrict access, disable or delete the user's other aliases, their Enterprise account, and disable the ability for guests to add users anonymously. For more information, see Managing Enterprise and general accounts.To restrict access for this user