diff --git a/manifests/pam.pp b/manifests/pam.pp
index b2938c3..00468e7 100644
--- a/manifests/pam.pp
+++ b/manifests/pam.pp
@@ -67,6 +67,7 @@
           owner   => root,
           group   => root,
           mode    => '0640',
+          notify  => Exec['update-pam'],
         }
 
       } else {
@@ -75,6 +76,7 @@
         # delete passwdqc file on ubuntu and debian
         file { $passwdqc_path:
           ensure => absent,
+          notify => Exec['update-pam'],
         }
 
         # make sure the package is not on the system,
@@ -98,15 +100,18 @@
           owner   => root,
           group   => root,
           mode    => '0640',
+          notify  => Exec['update-pam'],
         }
       } else {
         file { $tally2_path:
           ensure => absent,
+          notify => Exec['update-pam'],
         }
       }
 
       exec { 'update-pam':
-        command => '/usr/sbin/pam-auth-update --package'
+        command     => '/usr/sbin/pam-auth-update --package',
+        refreshonly => true,
       }
     }