From 0c8a6eca3ccd6b92876662b23e8cf8d0fb5611cc Mon Sep 17 00:00:00 2001
From: abrown38 <a.brown@epcc.ed.ac.uk>
Date: Tue, 9 Apr 2024 10:03:44 +0000
Subject: [PATCH] Create required users and OUs

---
 .../win_domain_controller/tasks/main.yml      |  1 +
 .../win_domain_controller/tasks/users.yml     | 35 +++++++++++++++++++
 2 files changed, 36 insertions(+)
 create mode 100644 ansible/roles/win_domain_controller/tasks/users.yml

diff --git a/ansible/roles/win_domain_controller/tasks/main.yml b/ansible/roles/win_domain_controller/tasks/main.yml
index 7663b70..3fbe0a3 100644
--- a/ansible/roles/win_domain_controller/tasks/main.yml
+++ b/ansible/roles/win_domain_controller/tasks/main.yml
@@ -1,3 +1,4 @@
 ---
 - import_tasks: features.yml
 - import_tasks: setup.yml
+- import_tasks: users.yml
diff --git a/ansible/roles/win_domain_controller/tasks/users.yml b/ansible/roles/win_domain_controller/tasks/users.yml
new file mode 100644
index 0000000..7eae24e
--- /dev/null
+++ b/ansible/roles/win_domain_controller/tasks/users.yml
@@ -0,0 +1,35 @@
+---
+- name: Users
+  tags: post_promotion_users
+  block:
+    - name: Ensure Project Users and Project Groups OUs are present
+      community.windows.win_domain_ou:
+        name: "{{ item }}"
+        path: "DC={{ win_project }},DC=loc"
+        state: present
+        protected: true
+      loop:
+        - Project Users
+        - Project Groups
+        - Disabled Users
+        - Management Computers
+        - User Computers
+
+    - name: Create 'Admin' user 
+      community.windows.win_domain_user:
+        name: admin
+        password: "{{ domain_admin_password }}"
+        state: present
+        password_never_expires: yes
+        groups:
+          - Domain Admins
+
+    - name: Create 'file-transfer' user for *** File Transfer *** script
+      community.windows.win_domain_user:
+        name: file-transfer
+        firstname: File
+        surname: Transfer
+        password: "{{ transfer_user_password }}"
+        state: present
+        password_never_expires: yes
+  when: inventory_hostname in groups['meta-name_dc01']