Details
-
Bug
-
Status: Closed
-
Normal
-
Resolution: Done
-
PUP 3.7.3
-
None
-
Windows 2008 R2, Windows 2012, Windows 2012 R2
-
2
-
Windows 2015-04-08, Windows 2015-04-22
-
Bug Fix
Description
In Windows, many groups are built-in and cannot be removed, therefore ensure => absent is useless. Another approach would be to define the group as present with no members. For example:
group { 'Guests':
|
ensure => 'present',
|
members => [],
|
}
|
Unfortunately, this will not remove any members of the built-in Guests group, but instead leave any members existing.
The underlying goal is to ensure that all unnecessary groups are empty.
Update for Puppet 4
In PUP 4.x+, because groups are not authoritative by default, you need the add auth_membership => true to the mix to force an existing group to empty.
group { 'Guests':
|
ensure => 'present',
|
members => [],
|
auth_membership => true,
|
}
|
Attachments
Issue Links
- relates to
-
-
- Closed
-
-
-
- Closed
-
-
-
- Closed
-
-
-
- Closed
-
-
-
- Closed
-
- links to
