AADUser: Ensure: Absent logic seems wrong

[bartvermeersch]

AAD Users with Ensure set to Absent are removed and recreated every next run after removal.

The logic is correct when the resource exists, but if it doesn't it will just create it although Ensure is set to Absent

Microsoft365DSC/Modules/Microsoft365DSC/DSCResources/MSFT_AADUser/MSFT_AADUser.psm1

Line 416 in 6c61af4

if ($user.Ensure -eq 'Present' -and $Ensure -eq 'Absent')

A condition if ($Ensure -eq 'Present') is missing on line 421

[William-Francillette]

Tested on my tenant and working ok - Could you check your event viewer > application and service logs > M365DSC if there is any error?

[andikrueger]

@William-Francillette If is read the code correctly, this really a bug.

configuration should look like this and there should not be a user with the UPN John.Smith

AADUser 'ConfigureJohnSMith'
        {
            UserPrincipalName  = "John.Smith@$Domain"
            DisplayName        = "John J. Smith"
            Ensure             = "Absent"
            Credential         = $Credscredential
        }
}

In this case, the Get-Method will return Absent and therefor we will directly jump into the else block. This will result in a new user bein created, even if it should not be created.

Needs to be an

elseif( $Ensure -eq 'Present") 

then.