From 90841b76bf4912094cb8e7f48b519663d5f2b7fd Mon Sep 17 00:00:00 2001
From: abrown38 <a.brown@epcc.ed.ac.uk>
Date: Sat, 6 Apr 2024 15:42:01 +0000
Subject: [PATCH] added win_initial role

---
 ansible/playbooks/win_initial.yml           |  8 +++
 ansible/roles/win_initial/tasks/initial.yml | 55 +++++++++++++++++++++
 ansible/roles/win_initial/tasks/main.yml    |  2 +
 3 files changed, 65 insertions(+)
 create mode 100644 ansible/playbooks/win_initial.yml
 create mode 100644 ansible/roles/win_initial/tasks/initial.yml
 create mode 100644 ansible/roles/win_initial/tasks/main.yml

diff --git a/ansible/playbooks/win_initial.yml b/ansible/playbooks/win_initial.yml
new file mode 100644
index 0000000..5cda4fa
--- /dev/null
+++ b/ansible/playbooks/win_initial.yml
@@ -0,0 +1,8 @@
+---
+- hosts: "meta-win_project_{{ win_project }}"
+  vars_files:
+    - ../vars/common.yml
+    - ../vars/connection.yml
+  roles:
+    - role: win_initial
+      tags: win_initial
\ No newline at end of file
diff --git a/ansible/roles/win_initial/tasks/initial.yml b/ansible/roles/win_initial/tasks/initial.yml
new file mode 100644
index 0000000..988adbf
--- /dev/null
+++ b/ansible/roles/win_initial/tasks/initial.yml
@@ -0,0 +1,55 @@
+---
+- name: Ping Windows hosts
+  win_ping:
+  tags: initial_ping
+
+- name: Set WinRM to delayed startup
+  ansible.windows.win_service:
+    name: WinRM
+    start_mode: delayed
+  tags: winrm_delayed
+
+- name: Remove Local Admin
+  tags: remove_admin
+  block:
+    - name: Delete admin user account
+      win_user:
+        name: Admin
+        state: absent
+
+    - name: Delete Admin Home folder
+      win_file:
+        path: "C:\\Users\\Admin"
+        state: absent 
+  rescue:
+    - name: Reboot VMs
+      win_reboot:
+
+    - name: Try again to delete Admin Home folder
+      win_file:
+        path: "C:\\Users\\Admin"
+        state: absent
+
+- name: Create EIDF directory in system drive
+  win_file:
+    path: "C:\\eidf"
+    state: directory
+  tags: eidf_dir_create
+
+- name: Veeam account creation 
+  win_user:    
+    name: VeeamUser
+    description: Veeam Backup account
+    password: "{{ veeam_password }}"
+    password_never_expires: True
+    state: present
+    groups:
+      - Administrators
+  tags: 
+    - veeam_account
+
+- name: Set timezone
+  community.windows.win_timezone:
+    timezone: GMT Standard Time
+  tags: timezone
+
diff --git a/ansible/roles/win_initial/tasks/main.yml b/ansible/roles/win_initial/tasks/main.yml
new file mode 100644
index 0000000..330604d
--- /dev/null
+++ b/ansible/roles/win_initial/tasks/main.yml
@@ -0,0 +1,2 @@
+---
+- import_tasks: initial.yml