Adds warning if user is AD synced

Modules/CIPPCore/Public/Set-CIPPSignInState.ps1

@@ -13,13 +13,19 @@ function Set-CIPPSignInState {
             accountEnabled = [bool]$AccountEnabled
         }
         $body = ConvertTo-Json -InputObject $body -Compress -Depth 5
+        $UserDetails = New-GraphGetRequest -uri "https://graph.microsoft.com/v1.0/users/$($UserId)?`$select=onPremisesSyncEnabled" -noPagination $true -tenantid $TenantFilter -verbose
         $null = New-GraphPostRequest -uri "https://graph.microsoft.com/v1.0/users/$($UserId)" -tenantid $TenantFilter -type PATCH -body $body -verbose
         Write-LogMessage -user $ExecutingUser -API $APIName -message "Set account enabled state to $AccountEnabled for $UserId" -Sev 'Info' -tenant $TenantFilter
-        return "Set account enabled state to $AccountEnabled for $UserId"
+
+        if($UserDetails.onPremisesSyncEnabled -eq $true){
+            return "WARNING: User is AD Sync enabled. Please enable/disable in AD."
+        }else{
+            return "Set account enabled state to $AccountEnabled for $UserId"
+        }
+
     } catch {
         $ErrorMessage = Get-CippException -Exception $_
         Write-LogMessage -user $ExecutingUser -API $APIName -message "Could not disable sign in for $UserId. Error: $($ErrorMessage.NormalizedError)" -Sev 'Error' -tenant $TenantFilter -LogData $ErrorMessage
         return "Could not disable $UserId. Error: $($ErrorMessage.NormalizedError)"
     }
 }
-