Revoke unentitled software

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read
  • Revoke software using Microsoft System Center Configuration Manager (SCCM) that a user is not entitled to use even if the software was installed by some other process or user.

    Before you begin

    To revoke software using SCCM, you must create an Define an SCCM configuration for the application, in which the appropriate software Discovery model is defined. See Software discovery models Discovery models and software installations.

    Role required: sn_client_sf_dist.csd_admin or admin

    Client Software Distribution (CSD) uses Software Asset Management to identify unentitled software installations. Discovery detects the software on the user's machine, and SAM determines if the user or device is entitled to use that software. This might include software that was not installed through a catalog request or software that the user installed without approval. If the software installation's Discovery model is associated with an SCCM software configuration that has an uninstall collection defined, then an administrator can use CSD to revoke that software from the user's machine without involving the user.

    Procedure

    1. Navigate to All > Client Software Distribution > Reports > Installed Software Not Entitled.
    2. Select the record for the installation that has unentitled users.
    3. Under Related Links, click Revoke software.
      This action runs the Revoke Client Software flow, which triggers the Revoke SCCM Application subflow that moves the user or device from the install collection to the uninstall collection. When SCCM performs an internal policy check and finds the user or device in the uninstall collection, SCCM removes the related software package from the client computer.
      Revoking a software installation