User resource sets password on every puppet agent run (Windows)

*Puppet Version: 5.5.10
*Puppet Server Version: 5.3.7
OS Name/Version: WIndows Server 2016

When using the following simple code to set the Administrator password on Windows:

$adminpassword = 'slkdhfl@#$slkW223' 

if $adminpassword { 

    user { 'Administrator': 

    ensure => present, 

    password => $adminpassword, 

    } 

} 

The above sets the password correctly but if

Deny access to this computer from the network

local group policy has been configured for members of the Administrator group, the password will get applied on every puppet agent run.

This has been reproduced locally on my Windows 2016 box where Deny access to this computer from the network has been set for the admin group, using the above code and puppet apply.

Desired Behavior: Corrective change for the password happens on the first puppet only.

Actual Behavior: Corrective change for the password gets made on every puppet run.