title: How do I remove a user from tfs?
body: <p>I have two users who are "stuck" in my tfs 2012 instance, so to speak. I've removed them from every conceivable group I can think of, yet they still have access to the portal (albeit with no projects).</p>
  
  <p>Running the imx command found <a href="http://msdn.microsoft.com/en-us/library/ms400806.aspx">here</a> yields the following information:</p>
  
  <blockquote>
    <p>Microsoft (R) TFSSecurity - Team Foundation Server Security Tool
    Copyright (c) Microsoft Corporation.  All rights reserved.</p>
    
    <p>The target Team Foundation Server is mytfsserverurl.<br />
    Resolving identity "NT\username"...</p>
    
    <p>SID: S-1-5-21-1715567821-1897051121-682003330-9628</p>
    
    <p>DN: CN=User Name,OU=Win7_Desktop_Restricted,DC=nt,DC=domain,DC=com</p>
    
    <p>Identity type: Windows user <br />
      Logon name: NT\username <br />
    Display name: User Name <br />
     Description: blahjblah <br /></p>
    
    <p>Member of 2 group(s):</p>
    
    <p>e [A] [TEAM FOUNDATION]\Team Foundation Valid Users <br/>
    e [A] [CollectionName]\Project Collection Valid Users</p>
    
    <p>Done.</p>
  </blockquote>
  
  <p>However, these users aren't in any other groups. When I look at the group membership for these groups on the server itself they aren't in there either. Neither user has any changesets, work items, or workspaces.</p>
  
  <p>They appear in the web portal, but only when I search for them. I can't find them by navigating, and when I try to click "remove" I get the following error message:</p>
  
  <blockquote>
    <p>Unable to remove the selected identity from this group.hide details
    TF50618: The Team Foundation Valid Users group cannot be modified directly.</p>
  </blockquote>
  
  <p><img src="https://i.stack.imgur.com/uXOYq.png" alt="enter image description here"></p>
  
  <p>How can I remove these users from these groups?</p>