active-directory-automation

What problem does it solve? Manually creating Active Directory users, assigning groups, linking GPOs, and configuring SMB/NTFS permissions is repetitive and error-prone. This Skill generates safe, idempotent PowerShell automation for these tasks with built-in validation before and after every change. ## Core Features & Use Cases - User and Group Automation: Create users with New-ADUser, set secure initial passwords with forced change at logon, and add users to groups with Add-ADGroupMember. - GPO Management: Create and link GPOs to OUs with New-GPO and New-GPLink, inspect inheritance with Get-GPInheritance, and validate with gpresult. - File Share Provisioning: Create per-user folders, SMB shares with New-SmbShare, and apply least-privilege NTFS permissions via icacls. - Use Case: A new employee joins the finance department. Provide the name, login, OU, and groups, and the Skill produces an idempotent PowerShell script that creates the account, adds group memberships, provisions a home folder with correct SMB/NTFS permissions, and runs validation checks. ## Quick Start Ask the assistant to generate an idempotent PowerShell script that creates an AD user, adds them to specified groups, and provisions a secured SMB home folder with validation steps.