---
- name: Users
  tags: post_promotion_users
  block:
    - name: Ensure Project Users and Project Groups OUs are present
      community.windows.win_domain_ou:
        name: "{{ item }}"
        path: "DC={{ win_project }},DC=loc"
        state: present
        protected: true
      loop:
        - Project Users
        - Project Groups
        - Disabled Users
        - Management Computers
        - User Computers

    - name: Create 'Admin' user 
      community.windows.win_domain_user:
        name: admin
        password: "{{ domain_admin_password }}"
        state: present
        password_never_expires: yes
        groups:
          - Domain Admins

    - name: Create 'file-transfer' user for *** File Transfer *** script
      community.windows.win_domain_user:
        name: file-transfer
        firstname: File
        surname: Transfer
        password: "{{ transfer_user_password }}"
        state: present
        password_never_expires: yes
  when: inventory_hostname in groups['meta-name_dc01']