ADImport.py

# Import the Active Directory module
Import-Module ActiveDirectory

# Function to create a new user and assign permissions
function New-ADUserWithPermissions {
    param (
        [string]$FirstName,
        [string]$LastName,
        [SecureString]$UserPassword,
        [string]$OU,
        [string]$Group,
        [string]$PermissionsFolderPath
    )

    # Construct the user's attributes
    $UserName = "$FirstName.$LastName"
    $DisplayName = "$FirstName $LastName"
    $UserPrincipalName = "$UserName@example.com"
    $Email = "$UserName@example.com"

    try {
        # Create the new user in the specified OU
        New-ADUser -Name $DisplayName `
            -GivenName $FirstName `
            -Surname $LastName `
            -UserPrincipalName $UserPrincipalName `
            -SamAccountName $UserName `
            -EmailAddress $Email `
            -Path $OU `
            -AccountPassword (ConvertTo-SecureString $UserPassword -AsPlainText -Force) `
            -Enabled $true

        # Add the new user to the specified AD group
        Add-ADGroupMember -Identity $Group -Members $UserName

        # Enable the user account
        Enable-ADAccount -Identity $UserName

        # Assign NTFS permissions to the user on the specified folder (Modify Permissions Example)
        if ($PermissionsFolderPath) {
            $acl = Get-Acl $PermissionsFolderPath
            $permission = "DOMAIN\$UserName", "Modify", "ContainerInherit,ObjectInherit", "None", "Allow"
            $accessRule = New-Object System.Security.AccessControl.FileSystemAccessRule $permission
            $acl.SetAccessRule($accessRule)
            Set-Acl $PermissionsFolderPath $acl

            Write-Host "Permissions for $UserName set on $PermissionsFolderPath"
        }

        Write-Host "User $DisplayName created and added to the $Group group with permissions."
    } catch {
        Write-Host "Error: $_"
    }
}

# Function to revoke permissions and disable user account upon termination
function Revoke-ADUserPermissionsOnTermination {
    param (
        [string]$UserName,
        [string]$Group,
        [string]$PermissionsFolderPath
    )

    try {
        # Remove user from the specified AD group
        Remove-ADGroupMember -Identity $Group -Members $UserName -Confirm:$false

        # Revoke NTFS permissions from the user on the specified folder
        if ($PermissionsFolderPath) {
            $acl = Get-Acl $PermissionsFolderPath
            $accessRule = $acl.Access | Where-Object { $_.IdentityReference -like "*\$UserName" }
            if ($accessRule) {
                $acl.RemoveAccessRule($accessRule)
                Set-Acl $PermissionsFolderPath $acl
                Write-Host "Permissions for $UserName revoked on $PermissionsFolderPath"
            }
        }

        # Disable the user account
        Disable-ADAccount -Identity $UserName
        Write-Host "User $UserName account disabled and permissions revoked."
    } catch {
        Write-Host "Error: $_"
    }
}