diff --git a/ad-auth/tasks/main.yml b/ad-auth/tasks/main.yml
index 6344bd87668305dfbd1a4b9c3d385d28a56f944a..d9f4afc19663a3d3e3ffb21f97398d60ddf62743 100644
--- a/ad-auth/tasks/main.yml
+++ b/ad-auth/tasks/main.yml
@@ -11,3 +11,9 @@
 - meta: flush_handlers
 - include: sudo.yml
 - meta: flush_handlers
+
+- name: ensure there is no local users group
+  lineinfile: dest=/etc/group state=absent line="users:x:100:"
+  tags:
+    - groups
+    - config