Create required users and OUs

ansible/roles/win_domain_controller/tasks/main.yml

@@ -1,3 +1,4 @@
 ---
 - import_tasks: features.yml
 - import_tasks: setup.yml
+- import_tasks: users.yml

ansible/roles/win_domain_controller/tasks/users.yml

@@ -0,0 +1,35 @@
+---
+- name: Users
+  tags: post_promotion_users
+  block:
+    - name: Ensure Project Users and Project Groups OUs are present
+      community.windows.win_domain_ou:
+        name: "{{ item }}"
+        path: "DC={{ win_project }},DC=loc"
+        state: present
+        protected: true
+      loop:
+        - Project Users
+        - Project Groups
+        - Disabled Users
+        - Management Computers
+        - User Computers
+
+    - name: Create 'Admin' user 
+      community.windows.win_domain_user:
+        name: admin
+        password: "{{ domain_admin_password }}"
+        state: present
+        password_never_expires: yes
+        groups:
+          - Domain Admins
+
+    - name: Create 'file-transfer' user for *** File Transfer *** script
+      community.windows.win_domain_user:
+        name: file-transfer
+        firstname: File
+        surname: Transfer
+        password: "{{ transfer_user_password }}"
+        state: present
+        password_never_expires: yes
+  when: inventory_hostname in groups['meta-name_dc01']