Mr.X

#!powershell

# GNU General Public License v3.0+ (see COPYING or https://www.gnu.org/licenses/gpl-3.0.txt)

#Requires -Module Ansible.ModuleUtils.Legacy

Set-StrictMode -Version 2
$ErrorActionPreference = "Stop"

# FUTURE: Consider action wrapper to manage reboots and credential changes

# Set of features required for a domain controller
$dc_required_features = @("AD-Domain-Services", "RSAT-ADDS")

Function Get-MissingFeature {
    Param(
        [string[]]$required_features
    )
    $features = @(Get-WindowsFeature $required_features)
    # Check for $required_features that are not in $features
    $unavailable_features = @(Compare-Object -ReferenceObject $required_features -DifferenceObject ($features | Select-Object -ExpandProperty Name) -PassThru)

    if ($unavailable_features) {
        Throw "The following features required for a domain controller are unavailable: $($unavailable_features -join ',')"
    }

    $missing_features = @($features | Where-Object InstallState -ne Installed)

    return @($missing_features)
}

Function Install-Prereq {
    $missing_features = Get-MissingFeature $dc_required_features
    if ($missing_features) {
        $result.changed = $true

        $awf = Add-WindowsFeature $missing_features -WhatIf:$check_mode
        $result.reboot_required = $awf.RestartNeeded
        # FUTURE: Check if reboot necessary

        return $true
    }
    return $false
}

Function Get-DomainForest {
    <#
    .SYNOPSIS
    Gets the domain forest similar to Get-ADForest but without requiring credential delegation.

    .PARAMETER DnsName
    The DNS name of the forest, for example 'sales.corp.fabrikam.com'.
    #>
    [CmdletBinding()]
    param (
        [Parameter(Mandatory = $true)]
        [String]$DnsName
    )

    try {
        $forest_context = New-Object -TypeName System.DirectoryServices.ActiveDirectory.DirectoryContext -ArgumentList @(
            'Forest', $DnsName
        )
        [System.DirectoryServices.ActiveDirectory.Forest]::GetForest($forest_context)
    }
    catch [System.DirectoryServices.ActiveDirectory.ActiveDirectoryObjectNotFoundException] {
        Write-Error -Message "AD Object not found: $($_.Exception.Message)" -Exception $_.Exception
    }
    catch [System.DirectoryServices.ActiveDirectory.ActiveDirectoryOperationException] {
        Write-Error -Message "AD Operation Exception: $($_.Exception.Message)" -Exception $_.Exception
    }
}

$params = Parse-Args $args -supports_check_mode $true
$check_mode = Get-AnsibleParam -obj $params -name "_ansible_check_mode" -default $false
$dns_domain_name = Get-AnsibleParam -obj $params -name "dns_domain_name" -failifempty $true
$domain_netbios_name = Get-AnsibleParam -obj $params -name "domain_netbios_name"
$safe_mode_admin_password = Get-AnsibleParam -obj $params -name "safe_mode_password" -failifempty $true
$database_path = Get-AnsibleParam -obj $params -name "database_path" -type "path"
$sysvol_path = Get-AnsibleParam -obj $params -name "sysvol_path" -type "path"
$log_path = Get-AnsibleParam -obj $params -name "log_path" -type "path"
$create_dns_delegation = Get-AnsibleParam -obj $params -name "create_dns_delegation" -type "bool"
$domain_mode = Get-AnsibleParam -obj $params -name "domain_mode" -type "str"
$forest_mode = Get-AnsibleParam -obj $params -name "forest_mode" -type "str"
$install_dns = Get-AnsibleParam -obj $params -name "install_dns" -type "bool" -default $true

# FUTURE: Support down to Server 2012?
if ([System.Environment]::OSVersion.Version -lt [Version]"6.3.9600.0") {
    Fail-Json -message "win_domain requires Windows Server 2012R2 or higher"
}

# Check that domain_netbios_name is less than 15 characters
if ($domain_netbios_name -and $domain_netbios_name.length -gt 15) {
    Fail-Json -message "The parameter 'domain_netbios_name' should not exceed 15 characters in length"
}

$result = @{
    changed = $false
    reboot_required = $false
}

# FUTURE: Any sane way to do the detection under check-mode *without* installing the feature?
$installed = Install-Prereq

# when in check mode and the prereq was "installed" we need to exit early as
# the AD cmdlets weren't really installed
if ($check_mode -and $installed) {
    Exit-Json -obj $result
}

# Check that we got a valid domain_mode
$valid_domain_modes = [Enum]::GetNames((Get-Command -Name Install-ADDSForest).Parameters.DomainMode.ParameterType)
if (($null -ne $domain_mode) -and -not ($domain_mode -in $valid_domain_modes)) {
    Fail-Json -obj $result -message "The parameter 'domain_mode' does not accept '$domain_mode', please use one of: $valid_domain_modes"
}

# Check that we got a valid forest_mode
$valid_forest_modes = [Enum]::GetNames((Get-Command -Name Install-ADDSForest).Parameters.ForestMode.ParameterType)
if (($null -ne $forest_mode) -and -not ($forest_mode -in $valid_forest_modes)) {
    Fail-Json -obj $result -message "The parameter 'forest_mode' does not accept '$forest_mode', please use one of: $valid_forest_modes"
}

$forest = Get-DomainForest -DnsName $dns_domain_name -ErrorAction SilentlyContinue
if (-not $forest) {
    $result.changed = $true

    $sm_cred = ConvertTo-SecureString $safe_mode_admin_password -AsPlainText -Force

    $install_params = @{
        DomainName = $dns_domain_name
        SafeModeAdministratorPassword = $sm_cred
        Confirm = $false
        SkipPreChecks = $true
        InstallDns = $install_dns
        NoRebootOnCompletion = $true
        WhatIf = $check_mode
    }

    if ($database_path) {
        $install_params.DatabasePath = $database_path
    }

    if ($sysvol_path) {
        $install_params.SysvolPath = $sysvol_path
    }

    if ($log_path) {
        $install_params.LogPath = $log_path
    }

    if ($domain_netbios_name) {
        $install_params.DomainNetBiosName = $domain_netbios_name
    }

    if ($null -ne $create_dns_delegation) {
        $install_params.CreateDnsDelegation = $create_dns_delegation
    }

    if ($domain_mode) {
        $install_params.DomainMode = $domain_mode
    }

    if ($forest_mode) {
        $install_params.ForestMode = $forest_mode
    }

    $iaf = $null
    try {
        $iaf = Install-ADDSForest @install_params
    }
    catch [Microsoft.DirectoryServices.Deployment.DCPromoExecutionException] {
        # ExitCode 15 == 'Role change is in progress or this computer needs to be restarted.'
        # DCPromo exit codes details can be found at
        # https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/troubleshooting-domain-controller-deployment
        if ($_.Exception.ExitCode -in @(15, 19)) {
            $result.reboot_required = $true
        }
        else {
            Fail-Json -obj $result -message "Failed to install ADDSForest, DCPromo exited with $($_.Exception.ExitCode): $($_.Exception.Message)"
        }
    }

    if ($check_mode) {
        # the return value after -WhatIf does not have RebootRequired populated
        # manually set to True as the domain would have been installed
        $result.reboot_required = $true
    }
    elseif ($null -ne $iaf) {
        $result.reboot_required = $iaf.RebootRequired

        # The Netlogon service is set to auto start but is not started. This is
        # required for Ansible to connect back to the host and reboot in a
        # later task. Even if this fails Ansible can still connect but only
        # with ansible_winrm_transport=basic so we just display a warning if
        # this fails.
        try {
            Start-Service -Name Netlogon
        }
        catch {
            $msg = -join @(
                "Failed to start the Netlogon service after promoting the host, "
                "Ansible may be unable to connect until the host is manually rebooting: $($_.Exception.Message)"
            )
            Add-Warning -obj $result -message $msg
        }
    }
}

Exit-Json $result

Name	Type	Size	Permission
__pycache__	Folder		0755
__init__.py	File	0 B	0644
async_status.ps1	File	1.81 KB	0644
async_status.yml	File	1.77 KB	0644
setup.ps1	File	49.89 KB	0644
setup.yml	File	2.35 KB	0644
slurp.ps1	File	728 B	0644
slurp.yml	File	1.5 KB	0644
win_acl.ps1	File	9.54 KB	0644
win_acl.py	File	4.14 KB	0644
win_acl_inheritance.ps1	File	4.72 KB	0644
win_acl_inheritance.py	File	2.34 KB	0644
win_certificate_store.ps1	File	19.78 KB	0644
win_certificate_store.py	File	8.08 KB	0644
win_command.ps1	File	3.98 KB	0644
win_command.py	File	6.13 KB	0644
win_copy.ps1	File	18.06 KB	0644
win_copy.py	File	6.55 KB	0644
win_dns_client.ps1	File	12.99 KB	0644
win_dns_client.py	File	2.13 KB	0644
win_domain.ps1	File	7.67 KB	0644
win_domain.py	File	4.15 KB	0644
win_domain_controller.ps1	File	12.37 KB	0644
win_domain_controller.py	File	5.66 KB	0644
win_domain_membership.ps1	File	10.36 KB	0644
win_domain_membership.py	File	3.35 KB	0644
win_dsc.ps1	File	19.46 KB	0644
win_dsc.py	File	7.31 KB	0644
win_environment.ps1	File	5.56 KB	0644
win_environment.py	File	4.13 KB	0644
win_feature.ps1	File	4.1 KB	0644
win_feature.py	File	4.63 KB	0644
win_file.ps1	File	5.4 KB	0644
win_file.py	File	2.16 KB	0644
win_find.ps1	File	14.29 KB	0644
win_find.py	File	11.19 KB	0644
win_get_url.ps1	File	11.59 KB	0644
win_get_url.py	File	5.82 KB	0644
win_group.ps1	File	1.64 KB	0644
win_group.py	File	1.1 KB	0644
win_group_membership.ps1	File	5.82 KB	0644
win_group_membership.py	File	2.95 KB	0644
win_hostname.ps1	File	1 KB	0644
win_hostname.py	File	1.07 KB	0644
win_optional_feature.ps1	File	2.84 KB	0644
win_optional_feature.py	File	2.32 KB	0644
win_owner.ps1	File	2.18 KB	0644
win_owner.py	File	1.05 KB	0644
win_package.ps1	File	51.85 KB	0644
win_package.py	File	15.68 KB	0644
win_path.ps1	File	6.17 KB	0644
win_path.py	File	2.94 KB	0644
win_ping.ps1	File	454 B	0644
win_ping.py	File	1.16 KB	0644
win_powershell.ps1	File	29.57 KB	0644
win_powershell.py	File	15.7 KB	0644
win_reboot.py	File	4.76 KB	0644
win_reg_stat.ps1	File	4.11 KB	0644
win_reg_stat.py	File	3.51 KB	0644
win_regedit.ps1	File	18.12 KB	0644
win_regedit.py	File	6.35 KB	0644
win_service.ps1	File	37.85 KB	0644
win_service.py	File	16.71 KB	0644
win_service_info.ps1	File	9.98 KB	0644
win_service_info.py	File	9.44 KB	0644
win_share.ps1	File	11.93 KB	0644
win_share.py	File	3.02 KB	0644
win_shell.ps1	File	4.93 KB	0644
win_shell.py	File	5.69 KB	0644
win_stat.ps1	File	7.24 KB	0644
win_stat.py	File	7.39 KB	0644
win_tempfile.ps1	File	2.46 KB	0644
win_tempfile.py	File	1.49 KB	0644
win_template.py	File	5.48 KB	0644
win_updates.ps1	File	57.42 KB	0644
win_updates.py	File	11.95 KB	0644
win_uri.ps1	File	7.95 KB	0644
win_uri.py	File	4.14 KB	0644
win_user.ps1	File	16.46 KB	0644
win_user.py	File	5.43 KB	0644
win_user_right.ps1	File	13.78 KB	0644
win_user_right.py	File	3.24 KB	0644
win_wait_for.ps1	File	9.56 KB	0644
win_wait_for.py	File	4.42 KB	0644
win_whoami.ps1	File	30.96 KB	0644
win_whoami.py	File	5.29 KB	0644

Upload:

Command:

Filemanager

Server Info

System Info