Running a deprovisioning script on a users account removes only on prem groups, not Azure AD groups

Question

As part of user deprovisioning, I’ve run a script in Adaxes targeted at the on-prem AD account to remove all group memberships. It removes only the on-prem groups not the Azure AD groups. The script removes AAD groups only when run directly on the cloud object.

Is there a configuration or sync setting we should check to ensure both on prem and AAD groups are removed when targeting the on prem account?

The script I have tried using is the one from https://www.adaxes.com/script-repository/remove-all-group-memberships-for-a-user-account-s33.htm

Comments

Hello,

Please, provide the script you are using in TXT format including all the changes made.

Also, please, post here or send us (support@adaxes.com) with a screenshot of the Multi-server environment dialog. The dialog displays how many Adaxes services you have and what their versions are. For information on how to view it, see https://www.adaxes.com/help/MultiServerEnvironment.