---
# tasks file for windows_add-ad-group
- name: Create ad security group for Devices
  community.windows.win_domain_group:
    name: G-MGMT-LA-DEVADM-{{ hostname|upper }}
    path: OU=Local_Admin,OU=Device_Privileges,OU=Management_Groups,OU=Aperam,DC=ADAGILITY,DC=NET
    domain_username: "{{ad_user}}"
    domain_password: "{{ad_pass}}"
    state: present
    scope: global


- name: add admin users to ad group 
  community.windows.win_domain_group_membership:
    domain_username: "{{ad_user}}"
    domain_password: "{{ad_pass}}"
    name: G-MGMT-LA-DEVADM-{{ hostname|upper }}
    members:
      - sys-awx-srvautomate
      - adm-bvandendaele
      - adm-yclaes
      - adm-pvandeweert
    state: present