---
- name: Create admin group
  gather_facts: 
  hosts: all
  tasks:
    - name: add host to azure updates group
      microsoft.ad.group:
        name:  GG-GPO-APERAM-SERVERS-AZUREUPDATES
        identity: GG-GPO-APERAM-SERVERS-AZUREUPDATES
        members:  
          add: 
          - bac-don-01$ #arc
          - btn-mgt-009$ #arc
          - cht-fsr-001$ #arc
          - erk-don-01$ #arc
          - geb-fps-001$ #arc
          - gnk-fsr-002$ #arc
          - gnk-mgt-001$ #arc
         # #noarc
          - gns-app-001$ #arc
          - gns-don-01$ #arc
          - gue-fsr-001$ #arc
          - gue-mgt-002$ #arc
          - gue-psr-001$ #arc 
          - haa-app-001$ #arc 
        #  - haa-app-002$ #noarc stopped
          - haa-fps-001$ #arc
         # #noarc
         # #noarc
          - imp-fsr-001$ #arc
          - imp-psr-001$ #arc
          - isb-fsr-001$ #arc
          - isb-psr-001$ #arc
          - luh-don-01$ #arc 
          - mas-don-01$ #arc 
          - pod-don-01$ #arc
          - pon-imp-002$ #arc 
          - pon-mgt-001$ #arc 
          - pon-sch-agt-001$ #arc
          - rdn-fps-001$ #arc
          - rdn-hpv-001$ #arc
          - rdn-psr-001$ #arc
          - sde-fsr-001$ #arc 
          - ser-don-01$ #arc
        domain_username: "{{domain_admin}}"
        domain_password: "{{domain_password}}"
        scope: global 
      ignore_errors: true

    
    - name: remove host to azure updates group
      microsoft.ad.group:
        name:  GG-GPO-APERAM-SERVERS-WSUSPublish
        identity: GG-GPO-APERAM-SERVERS-WSUSPublish
        members:  
          remove: 
          - bac-don-01$
          - btn-mgt-009$
          - cht-fsr-001$
          - erk-don-01$
          - geb-fps-001$
          - gnk-fsr-002$
          - gnk-mgt-001$
        
          - gns-app-001$
          - gns-don-01$
          - gue-fsr-001$
          - gue-mgt-002$
          - gue-psr-001$
          - haa-app-001$
          - haa-app-002$
          - haa-fps-001$
        
        
          - imp-fsr-001$
          - imp-psr-001$
          - isb-fsr-001$
          - isb-psr-001$
          - luh-don-01$
          - mas-don-01$
          - pod-don-01$
          - pon-imp-002$
          - pon-mgt-001$
          - pon-sch-agt-001$
          - rdn-fps-001$
          - rdn-hpv-001$
          - rdn-psr-001$
          - sde-fsr-001$
          - ser-don-01$
        domain_username: "{{domain_admin}}"
        domain_password: "{{domain_password}}"
        scope: global 
      ignore_errors: true

    - name: remove host to azure updates group
      microsoft.ad.group:
        name:  GG-GPO-APERAM-SERVERS-WSUSAUTO
        identity: GG-GPO-APERAM-SERVERS-WSUSAUTO
        members:  
          remove: 
          - bac-don-01$
          - btn-mgt-009$
          - cht-fsr-001$
          - erk-don-01$
          - geb-fps-001$
          - gnk-fsr-002$
          - gnk-mgt-001$
        
          - gns-app-001$
          - gns-don-01$
          - gue-fsr-001$
          - gue-mgt-002$
          - gue-psr-001$
          - haa-app-001$
          - haa-app-002$
          - haa-fps-001$
        
        
          - imp-fsr-001$
          - imp-psr-001$
          - isb-fsr-001$
          - isb-psr-001$
          - luh-don-01$
          - mas-don-01$
          - pod-don-01$
          - pon-imp-002$
          - pon-mgt-001$
          - pon-sch-agt-001$
          - rdn-fps-001$
          - rdn-hpv-001$
          - rdn-psr-001$
          - sde-fsr-001$
          - ser-don-01$
        domain_username: "{{domain_admin}}"
        domain_password: "{{domain_password}}"
        scope: global 
      ignore_errors: true
      




#awe-app-037.aperam.net
#awe-tst-001.aperam.net