Jira (PUP-10057) User resource on Windows confuses domain and local accounts

[Kevin Reeuwijk (JIRA)]

Title: Message Title

Kevin Reeuwijk created an issue   Puppet / PUP-10057 User resource on Windows confuses domain and local accounts Issue Type: Bug Affects Versions: PUP 6.4.3 Assignee: Unassigned Components: Types and Providers, Windows Created: 2019/10/01 2:11 AM Priority: Normal Reporter: Kevin Reeuwijk Puppet Version: 6.4.3 (PE Agent from PE 2019.1.1) Puppet Server Version: PE 2019.1.1 OS Name/Version: Tested against Windows 2016 Behavior of the user resource goes wonky when an AD account exists that has the same name as the local user account you’re trying to manage on a Windows server that is domain-joined. Desired Behavior: Enforcing configuration of local user accounts on Windows domain-member servers works normally. Actual Behavior: When a user account exists locally on a member server, and a user account with the same name also exists in the Active Directory domain, this happens when setting `ensure=>absent` on that local user account: The first puppet run, the local user account is detected, and removed The second puppet run, the provider seems to detect the domain user account, and tries to delete the account again (from the local user database), which fails with this error: Could not set 'absent' on ensure: (in OLE method `Delete': ) OLE error code:800708AD in Active Directory The user name could not be found. HRESULT error code:0x80020009 Exception occurred. (file: /etc/puppetlabs/code/environments/development/site-modules/profile/manifests/base.pp, line: 98) Wrapped exception: (in OLE method `Delete': ) OLE error code:800708AD in Active Directory The user name could not be found. HRESULT error code:0x80020009 Exception occurred.   Add Comment   This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.327453.1569921077000.121825.1569921120222%40Atlassian.JIRA.