NetRemoveServiceAccount function (lmaccess.h)

The NetRemoveServiceAccount function deletes the specified service account from the Active Directory database if the account is a standalone managed service account (sMSA). For group managed service accounts (gMSAs), this function does not delete the account from the Active Directory database. The secret stored in the Local Security Authority (LSA) is deleted for both sMSAs and gMSAs, and the state is stored in the Netlogon registry store.

This function has no associated import library. You must use the LoadLibrary and GetProcAddress functions to dynamically link to Logoncli.dll.


NTSTATUS NetRemoveServiceAccount(
  [in, optional] LPWSTR ServerName,
  [in]           LPWSTR AccountName,
  [in]           DWORD  Flags


[in, optional] ServerName

The value of this parameter must be NULL.

[in] AccountName

The name of the account to be deleted.

[in] Flags

This parameter can have the following value.

Value Meaning
For sMSAs, the service account object is unlinked from the local computer and the secret stored in the LSA is deleted. The service account object is not deleted from the Active Directory database. This flag has no meaning for gMSAs.

Return value

If the function succeeds, it returns STATUS_SUCCESS.

If the function fails, it returns an error code.


Requirement Value
Minimum supported client Windows 7 [desktop apps only]
Minimum supported server Windows Server 2008 R2 [desktop apps only]
Target Platform Windows
Header lmaccess.h
DLL Netapi32.dll

See also