---
- name: "Create Windows group 'Ansibles'"
  ansible.windows.win_group:
    name: 'Ansibles'
    description: 'Group for Ansible Management'
    state: present

- name: fail if win_obs_init__password is unset
  ansible.builtin.fail:
    msg: "Please define a password for the user {{ win_base_init__created_user_name }} using 'win_base_init__created_user_password'!"
  when: win_base_init__created_user_password == 'ChangeToSecurePassword'

- name: create ansible User
  ansible.windows.win_user:
    name: "{{ win_base_init__created_user_name }}"
    state: present
    password: "{{ win_base_init__created_user_password }}"
    account_disabled: false
    description: 'Account to run ansible commands at this WINDOWS host'
    groups_action: 'add'
    password_expired: false
    password_never_expires: true
    user_cannot_change_password: true
    groups: "{{ win_base_init__os_groups }}"