How to delete Defender Soft Tokens (4313399)

How to remove and delete a Defender Soft Token from an Active Directory user.

This applies to the following token types:

HOW TO UNASSIGN A TOKEN FROM A USER:

1) Open Active Directory User and Computers

2) Locate the AD user for which you want to unassign the token.

3) Open the properties for this user and select the Defender tab.

4) In the token list, select the one you want to unassign.

5) Click the "Unassign" button
(If the Unassign button is greyed out, additional AD permissions will be required.)

6) Answer "YES" to the prompt asking if you would like to delete token as well as the user assignment.
(If the token is unassigned, but the object is not deleted, it will still consume a license.)

7) If the user needs a new token, click the "Program" button to start the Token Programming Wizard.


HOW TO DELETE UNASSIGNED SOFT TOKENS:

1) Open Active Directory User and Computers

2) Navigate to the OU where your Token objects are stored. By default this is the "Tokens" OU under the "Defender" OU.

3) The "Assigned To" column shows which user currently has this token assigned. (Note: The "Assigned To" column is only available in "Defender Token Organizational Unit" not standard AD OUs. Click on the Assigned To, column to sort them unassigned tokens first.

4) Soft Tokens cannot be reused. If the Assigned To column is blank, it means the token is not being used and can be deleted.

NOTE: GriDsure tokens do not create an associated AD object in the same way as other types of Soft Tokens. To unassign these types of tokens, use the first option above and navigate to the Defender tab of the User's Properties.

HOW TO PROGRAM NEW DEFENDER SOFT TOKENS:

1) Open Active Directory User and Computers

2) Select the Defender OU then select the Defender menu item from the ADUC menu bar then select Program Tokens...

3) Complete the Defender Token Programming Wizard. For more details see the Admin guide link here