tweaks for new VM creation

ansible/roles/win_domain_controller/tasks/setup.yml

@@ -56,7 +56,7 @@
     - name: Promote DC02 to domain controller
       microsoft.ad.domain_controller:
         dns_domain_name: "{{ win_project }}.loc"
-        domain_admin_user: "Administrator@{{ win_project }}.loc"
+        domain_admin_user: "{{ domain_administrator }}@{{ win_project }}.loc"
         domain_admin_password: "{{ ansible_password }}"
         safe_mode_password: "{{ safemode_password }}"
         state: domain_controller
@@ -70,7 +70,7 @@
     - name: Promote DC02 to domain controller
       microsoft.ad.domain_controller:
         dns_domain_name: "{{ win_project }}.loc"
-        domain_admin_user: "Administrator@{{ win_project }}.loc"
+        domain_admin_user: "{{ domain_administrator }}@{{ win_project }}.loc"
         domain_admin_password: "{{ ansible_password }}"
         safe_mode_password: "{{ safemode_password }}"
         state: domain_controller
@@ -131,6 +131,14 @@
         path: "cn=Users,dc={{ win_project }},dc=loc"
         scope: domainlocal
         category: security
+
+    - name: Create Docker Users group for Docker Desktop access
+      microsoft.ad.group:
+        name: "{{ docker_user_group }}"
+        description: "Allow docker desktop access for docker users"
+        path: "cn=Users,dc={{ win_project }},dc=loc"
+        scope: domainlocal
+        category: security
   when: inventory_hostname in groups['meta-name_dc01']