Remove Windows domain user

English Install/Boot/Login
1

I can´t remove a windows domain user from login screen and user list.

The person doesn´t work anymore here and I need to remove his name from the list of login.

thank you.

2

Hello and welcome here.

Please take note that most people here are just openSUSE users. People like you without crystal balls. So please tell us what “I can´t remove …” means. Did you try anything. When yes what? Did you get error messages? And so on and so on.

3

Thanks.

I just tryed to remove from account settings, it doesn´t work!

I tryed to use userdel -r as well, it doesn´t work.

I tryed to remove it from yast2 users and the users of domain are not here.

4

Yes,
Windows accounts are stored in a Domain Controller, not locally on the machine.

So,
First consideration is that if your Windows Network Administrators have any real education, they would have known not to create Domain accounts in a person’s name, but based on the company Role. Following that “best practice” would allow you to disable the account when a person leaves and re-enabled for whoever is hired to replace the person who has left. Disabling the account should prevent anyone from using that account to login to your Domain anywhere using those credentials, even if that account is displayed on a login page.

If you want to take the above a step further so that the account is not displayed on the login page, then you will need to modify the Greeter settings for whatever Display Manager is running on that machine. For more information about various Display Managers most likely found in openSUSE, it looks like the following SDB has been udpated…
https://en.opensuse.org/SDB:Change_Display_Manager

A previous post how to do this if you’re running gdm is
https://forums.opensuse.org/showthread.php/513681-Remove-configure-userlist-on-Login-Screen

There are many other Display Managers you might also be running, probably most likely lightdm which will have its own settings.

TSU

5

thanks.

So there is no way to remove the account from the users list in account settings.

6

Not on a workstatation it is stored and set on the server where ever and what ever it is running. As long as the workstation is connected to the server and the user account is set on the server the user will show up. It’s a network thing not a local thing.

7

Actual authentication is at the Server, so even if a name is displayed, if the account is disabled the login won’t be successful.
But, the Users displayed in the Login screen are likely cached locally and configurable by Display Manager settings.

TSU