windows-ansible/ansible/roles/win_domain_controller/tasks/users.yml

---
- name: Users
  tags: post_promotion_users
  block:
    - name: Create various OUs
      community.windows.win_domain_ou:
        name: "{{ item }}"
        path: "DC={{ win_project }},DC=loc"
        state: present
        protected: true
      loop:
        - Project Users
        - Project Groups
        - Disabled Users
        - Management Computers
        - User Computers

    - name: Create domain administrator user 
      community.windows.win_domain_user:
        name: "{{ domain_admin_username }}"
        password: "{{ domain_admin_password }}"
        state: present
        password_never_expires: yes
        groups:
          - Domain Admins

    - name: Create file-transfer user for
      community.windows.win_domain_user:
        name: file-transfer
        firstname: File
        surname: Transfer
        password: "{{ transfer_user_password }}"
        state: present
        password_never_expires: yes
  when: inventory_hostname in groups['meta-name_dc01']