Upload Ansible Files

playbook/kunden/test-server/defaults.yaml

@@ -0,0 +1,21 @@
+## Kundendaten
+kundenname: "Test123123"
+kundendomain: "Test.de"
+kundennummer: "13211323"
+kundenkürzel: "TST"
+kunde_public_ip: 1.1.1.1
+kundennetz: 192.168.1.0
+
+## Windows - Systeme
+exchange: 1
+rds: 1
+appserver: 1
+
+## Cloud Systeme
+nextcloud: 1
+
+## Network Config
+publicip: 94.130.17.156
+privatip: 172.20.1
+privatnetworkgw: 172.200.1.1
+

playbook/kunden/test-server/files/import_ad_user.ps1

@@ -0,0 +1,114 @@
+
+<#
+    .SYNOPSIS
+    Import-ADUsers.ps1
+
+    .DESCRIPTION
+    Import Active Directory users from CSV file.
+
+    .LINK
+    alitajran.com/import-ad-users-from-csv-powershell
+
+    .NOTES
+    Written by: ALI TAJRAN
+    Website:    alitajran.com
+    LinkedIn:   linkedin.com/in/alitajran
+
+    .CHANGELOG
+    V1.00, 04/24/2023 - Initial version
+    V1.10, 10/14/2023 - Improvement catch block
+#>
+
+# Define the CSV file location and import the data
+$Csvfile = "C:\deplyoment\adusers.csv"
+$Users = Import-Csv $Csvfile
+
+# Import the Active Directory module
+Import-Module ActiveDirectory
+
+# Loop through each user
+foreach ($User in $Users) {
+    $GivenName = $User.'First name'
+    $Surname = $User.'Last name'
+    $DisplayName = $User.'Display name'
+    $SamAccountName = $User.'User logon name'
+    $UserPrincipalName = $User.'User principal name'
+    $StreetAddress = $User.'Street'
+    $City = $User.'City'
+    $State = $User.'State/province'
+    $PostalCode = $User.'Zip/Postal Code'
+    $Country = $User.'Country/region'
+    $JobTitle = $User.'Job Title'
+    $Department = $User.'Department'
+    $Company = $User.'Company'
+    $ManagerDisplayName = $User.'Manager'
+    $Manager = if ($ManagerDisplayName) {
+        Get-ADUser -Filter "DisplayName -eq '$ManagerDisplayName'" -Properties DisplayName |
+        Select-Object -ExpandProperty DistinguishedName
+    }
+    $OU = $User.'OU'
+    $Description = $User.'Description'
+    $Office = $User.'Office'
+    $TelephoneNumber = $User.'Telephone number'
+    $Email = $User.'E-mail'
+    $Mobile = $User.'Mobile'
+    $Notes = $User.'Notes'
+    $AccountStatus = $User.'Account status'
+
+    # Check if the user already exists in AD
+    $UserExists = Get-ADUser -Filter "SamAccountName -eq '$SamAccountName'" -ErrorAction SilentlyContinue
+
+    if ($UserExists) {
+        Write-Warning "User '$SamAccountName' already exists in Active Directory."
+        continue
+    }
+
+    # Create new user parameters
+    $NewUserParams = @{
+        Name                  = "$GivenName $Surname"
+        GivenName             = $GivenName
+        Surname               = $Surname
+        DisplayName           = $DisplayName
+        SamAccountName        = $SamAccountName
+        UserPrincipalName     = $UserPrincipalName
+        StreetAddress         = $StreetAddress
+        City                  = $City
+        State                 = $State
+        PostalCode            = $PostalCode
+        Country               = $Country
+        Title                 = $JobTitle
+        Department            = $Department
+        Company               = $Company
+        Manager               = $Manager
+        Path                  = $OU
+        Description           = $Description
+        Office                = $Office
+        OfficePhone           = $TelephoneNumber
+        EmailAddress          = $Email
+        MobilePhone           = $Mobile
+        AccountPassword       = (ConvertTo-SecureString "P@ssw0rd1234" -AsPlainText -Force)
+        Enabled               = if ($AccountStatus -eq "Enabled") { $true } else { $false }
+        ChangePasswordAtLogon = $true # Set the "User must change password at next logon" flag
+    }
+
+    # Add the info attribute to OtherAttributes only if Notes field contains a value
+    if (![string]::IsNullOrEmpty($Notes)) {
+        $NewUserParams.OtherAttributes = @{info = $Notes }
+    }
+
+    try {
+        # Create the new AD user
+        New-ADUser @NewUserParams
+        Write-Host "User $SamAccountName created successfully." -ForegroundColor Cyan
+    }
+    catch {
+        # Failed to create the new AD user
+        $ErrorMessage = $_.Exception.Message
+        if ($ErrorMessage -match "The password does not meet the length, complexity, or history requirement") {
+            Write-Warning "User $SamAccountName created but account is disabled. $_"
+        }
+        else {
+            Write-Warning "Failed to create user $SamAccountName. $_"
+        }
+    }
+}

playbook/kunden/test-server/inventory.yaml

@@ -0,0 +1,46 @@
+proxmox:
+  hosts:
+    PROX01:
+      ansible_host: 94.130.17.156
+
+router:
+  hosts:
+    ROU01:
+      ansible_host: 110.1.1.1
+      ansible_user: admin
+  vars:
+    ansible_ssh_common_args: '-o StrictHostKeyChecking=no -o ProxyCommand="ssh -p 22 -W %h:%p -q root@94.130.17.156"'
+
+vorlage:
+  hosts:
+    windows_vorlage:
+      ansible_host: 110.1.1.50
+      # ansible_host: localhost
+      ansible_user: ansible-admin
+      # ansible_password: adm.3dfx12
+      ansible_port: 22
+      ansible_shell_type: cmd
+  vars:
+    ansible_ssh_common_args: '-o StrictHostKeyChecking=no -o ProxyCommand="ssh -p 22 -W %h:22 -q root@94.130.17.156"'
+
+windows:
+  hosts:
+    AD01:
+      ansible_host: 110.1.1.51
+      ansible_user: ansible-admin
+      ansible_password: adm.3dfx12
+      ansible_shell_type: cmd
+    RDS01:
+      ansible_host: 110.1.1.52
+      ansible_user: ansible-admin
+      ansible_password: adm.3dfx12
+      ansible_shell_type: cmd
+      ansible_connection: ssh
+    EX01:
+      ansible_host: 110.1.1.53
+      ansible_user: ansible-admin
+    APP01:
+      ansible_host: 110.1.1.54
+      ansible_user: ansible-admin
+  vars:
+    ansible_ssh_common_args: '-o StrictHostKeyChecking=no -o ProxyCommand="ssh -p 22 -W %h:%p -q root@94.130.17.156"'