<# 
Author: Patrick Gruenauer | Microsoft PowerShell MVP [2018-2022]
Web: sid-500.com
This script is intended for use in a test environment. It creates OUs, 
Groups and Users. 
#>

# If necessary, bypass the execution policy.

Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass -Force `
-Confirm:$false

# Define OUs, Groups and Users and Attributes here

$OUs =          'HR','Technicians','CEOs','Marketing','Groups','Workstations' 
$Groups =       'HR','Technicians','CEOs','Marketing'
$HRUsers =      'Hans Womanizer','Tatjana Schlank','Birgit Langbein',
                'Franz Bizeps'
$Technicians =  'Bernd Bullseye','Michael Hightower','Patrick Cumbersome'
$CEOs =         'Peter Travesty','Markus Haul'
$Marketing =    'Hannah Linux','Maria Azure','Susanne Amazon'
$City =         'Vienna','Berlin','New York'

# User Password 

$userpw =       '1234user!'

# Creating litte helpers ...
$root = $env:USERDNSDOMAIN.Split('.')[1]
$sub = $env:USERDNSDOMAIN.Split('.')[0]

# Create OUs

Foreach ($o in $OUs) {

New-ADOrganizationalUnit -Name $o -Verbose

}

# Create Groups

Foreach ($g in $Groups) {

New-ADGroup -Name $g `
-Path "OU=Groups,DC=$sub,DC=$root" `
-GroupScope Universal -GroupCategory Security -Verbose

}

# Create users and store them in the corresponding OU. 
# Add users to groups corresponding to the OU.

foreach ($h in $HRUsers) {

$split =    $h.split(' ')
$sam =      ($split[0].Substring(0,1) + '.' + $split[1]).ToLower()
$upn =      ($split[0].Substring(0,1) + '.' + $split[1] + '@' + 
            $env:USERDNSDOMAIN).ToLower()

New-ADUser `
-Name $h `
-GivenName $split[0] `
-Surname $split[1] `
-DisplayName $h `
-Enabled $true `
-AccountPassword (ConvertTo-SecureString -AsPlainText $userpw -Force) `
-SamAccountName $sam `
-UserPrincipalName $upn `
-Path "OU=HR,DC=$sub,DC=$root" `
-EmailAddress $upn `
-Department 'HR' `
-City (Get-Random -InputObject $City[0..3]) `
-Verbose

}

foreach ($t in $Technicians) {

$split =    $t.split(' ')
$sam =      ($split[0].Substring(0,1) + '.' + $split[1]).ToLower()
$upn =      ($split[0].Substring(0,1) + '.' + $split[1] + '@' + 
            $env:USERDNSDOMAIN).ToLower()

New-ADUser `
-Name $t `
-GivenName $split[0] `
-Surname $split[1] `
-DisplayName $t `
-Enabled $true `
-AccountPassword (ConvertTo-SecureString -AsPlainText $userpw -Force) `
-SamAccountName $sam `
-UserPrincipalName $upn `
-Path "OU=Technicians,DC=$sub,DC=$root" `
-EmailAddress $upn `
-Department 'Technicians' `
-City (Get-Random -InputObject $City[0..3]) `
-Verbose

}

foreach ($c in $CEOs) {

$split =    $c.split(' ')
$sam =      ($split[0].Substring(0,1) + '.' + $split[1]).ToLower()
$upn =      ($split[0].Substring(0,1) + '.' + $split[1] + '@' + 
            $env:USERDNSDOMAIN).ToLower()

New-ADUser `
-Name $c `
-GivenName $split[0] `
-Surname $split[1] `
-DisplayName $c `
-Enabled $true `
-AccountPassword (ConvertTo-SecureString -AsPlainText $userpw -Force) `
-SamAccountName $sam `
-UserPrincipalName $upn `
-Path "OU=CEOs,DC=$sub,DC=$root" `
-EmailAddress $upn `
-Department 'CEOs' `
-City (Get-Random -InputObject $City[0..3]) `
-Verbose

}

foreach ($m in $Marketing) {

$split =    $m.split(' ')
$sam =      ($split[0].Substring(0,1) + '.' + $split[1]).ToLower()
$upn =      ($split[0].Substring(0,1) + '.' + $split[1] + '@' + 
            $env:USERDNSDOMAIN).ToLower()

New-ADUser `
-Name $m `
-GivenName $split[0] `
-Surname $split[1] `
-DisplayName $m `
-Enabled $true `
-AccountPassword (ConvertTo-SecureString -AsPlainText $userpw -Force) `
-SamAccountName $sam `
-UserPrincipalName $upn `
-Path "OU=Marketing,DC=$sub,DC=$root" `
-EmailAddress $upn `
-Department 'Marketing' `
-City (Get-Random -InputObject $City[0..3]) `
-Verbose

}


# Add OU Users to Group

$ceosg = "OU=CEOs,DC=$sub,DC=$root"
$hrg = "OU=HR,DC=$sub,DC=$root"
$techg = "OU=Technicians,DC=$sub,DC=$root"
$marketingg = "OU=Marketing,DC=$sub,DC=$root"

Get-ADUser -Filter * -SearchBase $ceosg | 
ForEach-Object `
{Add-ADGroupMember -Identity CEOs -Members $_ -Verbose}

Get-ADUser -Filter * -SearchBase $hrg | 
ForEach-Object `
{Add-ADGroupMember -Identity HR -Members $_ -Verbose}

Get-ADUser -Filter * -SearchBase $techg | 
ForEach-Object `
{Add-ADGroupMember -Identity Technicians -Members $_ -Verbose}

Get-ADUser -Filter * -SearchBase $marketingg | 
ForEach-Object `
{Add-ADGroupMember -Identity Marketing -Members $_ -Verbose}

Start-Process dsa.msc