Forum Discussion
joe-miller
Mar 13, 2020Copper Contributor
how to Remove-RdsAppGroupUser if the user was already deleted from azure ad?
when i try to remove a user name from an RdsAppGroup and that user has already been deleted from azure ad, i get: Remove-RdsAppGroupUser : The specified UserPrincipalName does not exist in the Azure...
FortyMegabytes
Mar 16, 2020Brass Contributor
This may not be helpful, but this is how we get around it.
When an employee is terminated, we don't delete them from AD. Instead, we move them to a "Trash" OU and strip them of all their AD rights. That way they still exist in AD (and thus can be deleted by Remove-RdsAppGroupUser) but don't have the ability to actually do anything in AD.
The better solution, of course, would be for WVD to start supporting AD Groups instead of requiring us to add users individually.
When an employee is terminated, we don't delete them from AD. Instead, we move them to a "Trash" OU and strip them of all their AD rights. That way they still exist in AD (and thus can be deleted by Remove-RdsAppGroupUser) but don't have the ability to actually do anything in AD.
The better solution, of course, would be for WVD to start supporting AD Groups instead of requiring us to add users individually.
- Steve1435Apr 14, 2020Copper Contributor
- FortyMegabytesApr 14, 2020Brass ContributorJust so you know: I'm not a Microsoft guy, just a WVD user. I only commented about how we got around this limitation. The fact that WVD doesn't support AD groups is very limiting.