#Import logon scripts for all departments from the CSV file.
$logonScripts = Import-Csv -Path "D:\Scripts\Data\LogonScript.csv"

#Import users from CSV file.
$creationDate = (Get-Date).ToString("yyyy-MM-dd")
$basePath = "D:\Departments\Human Resources\UserManagement\"
$newuserPath = $basePath + "NewUsers.csv"
$provisionedPath = $basePath + "Completed\ProvisionedUsers.csv"
$currentuserPath = $basePath + "Completed\CurrentUsers.csv"

$newfile = Test-Path $newuserPath

if($newfile){
    $users = Import-Csv -Path $newuserPath
    
    $defphone = "713-485-5555"            #Default phone number
    $homeFolder = "\\chipvfs01\Users\"    #Path to Users shared folder which is to store user home folders
    $userAccounts = @()                   #UserAccounts object to store user account information    

    foreach($user in $users){             #Loop through each user read from the NewUsers.csv file

        #Read users information from the CSV file
        $gname = $user.FirstName
        $mname = $user.MiddleName
        $sname = $user.LastName
        $fullname = $gname + " " + $sname
        $description = $user.Description
        $office = $user.Office
        $country = $user.Country
        $company = "ITLifeSkills"
        $title = $user.JobTitle
        $department = $user.Department

        #Get the LogOnScript for the department of the current user 
        $script = ($logonScripts | where {$_.Department -eq $department}).LogonScript

        #Use the phone number in the CSV file if found otherwise use the default phone number
        if($user.PhoneNumber){

            $phone = $user.PhoneNumber
    
        }
        else{
            $phone = $defphone
        }

        # Generate a random password using ascii-characters-from-33-126
        # For more information about the asciicharacters https://www.ibm.com/docs/en/sdse/6.4.0?topic=configuration-ascii-characters-from-33-126

        $password = -join([char[]](33..122) | Get-Random -Count 10)
        $securePassword = ConvertTo-SecureString ($password) -AsPlainText -Force

        #Construct the username samAccount from middle name, given name and surname.
        if($user.MiddleName){

            $samAccount = ($gname[0] + $mname[0] + $sname[0]).ToLower()
    
        }
        else{
            $samAccount = ($gname[0] + "x" + $sname[0]).ToLower()
    
        }

        # Verify if the username exists, if Yes add $i to the username
        $i = 1
        do{
        
            try{
            $exist = Get-ADUser -Identity $samAccount
            $samAccount = $samAccount + $i
            $i++
            }
            catch{

                break
    
            }
        }while($exist)
           
        $userprincipal = $samAccount + "@hq.itlifeskills.local"    
    
        #If found  the manager in the CSV file, get the distinguished name of the manager
        $manager = $user.Manager
        if($manager){
            $userManager = (Get-ADUser -Filter 'DisplayName -eq $manager').DistinguishedName
        }
        else{
            $userManager = $null
        }

        #Find the Distinguished name of the department OU 
        $baseOU = "OU=Users,OU=ITLifeSkills,DC=hq,DC=itlifeskills,DC=local"
        $OU = (Get-ADOrganizationalUnit -SearchBase $baseOU -Filter 'Name -eq $department').DistinguishedName

        #Path to the User Home Folder
        $userFolder = $homeFolder + $fullname

        #Form the object of user properties
        $userProperties = @{
            GivenName = $gname
            Surname = $sname
            DisplayName = $fullname
            Name = $fullname
            SamAccountName = $samAccount
            AccountPassword = $securePassword
            UserPrincipalName = $userprincipal
            Office = $office
            Company = $company
            Country = $country
            Department = $department
            Description = $description
            Title = $title
            OfficePhone = $phone
            HomeDirectory = $userFolder
            HomeDrive = "U:"
            ScriptPath = $script 
            Path = $OU
            Manager = $userManager
            ChangePasswordAtLogon = $true
            Enabled = $true
        }
    
        #Create the new user from the @userProperties object
        New-ADUser @userProperties 
    
        #Chek if the folder exists. If not, create the user home folder
        $exist = Test-Path $userFolder

        if(!$exist){
    
            New-Item -Path $userFolder -ItemType "Directory"
        }
       
        #Get the current access list on the user home folder    
        $aclList  = Get-Acl -Path $userFolder
    
        #Create a rule parameters object for to grant FullControl access for the current user
    
        $parameters = @(
         "HQ\$samAccount"        #IdentityReference
         "FullControl"           #FileSystemRights
         ,@(                     #InheritanceFlags
            "ContainerInherit"   #Apply to the current folder
            "ObjectInherit"      #Apply to subfolders and files in the current folder
         )
         "None"                  #PropagationFlags
         "Allow"                 #AccessControlType
        )

        #Create the rule from the paramters
        $rule = New-Object -TypeName System.Security.AccessControl.FileSystemAccessRule -ArgumentList $parameters

        #Add the rule into the current access list
        $aclList.AddAccessRule($rule)

        #Set the new rule on the user home folder    
        $aclList | Set-Acl $userFolder

        #Appends the current user to the ProvisionedUsers.csv file
        $user | Export-Csv -Path $provisionedPath -Append -NoTypeInformation

        #Build the userdata object to export

        $user | Add-Member -MemberType NoteProperty -Name "CreatedOn" -Value $creationDate
        $user | Add-Member -MemberType NoteProperty -Name "SamAccountName" -Value $samAccount
        $user | Add-Member -MemberType NoteProperty -Name "AccountPassword" -Value $password
        $user | Add-Member -MemberType NoteProperty -Name "Status" -Value "New"
        $user | Add-Member -MemberType NoteProperty -Name "BadgeNumber" -Value ""
        $user | Add-Member -MemberType NoteProperty -Name "AssignedSeat" -Value ""
        $user | Add-Member -MemberType NoteProperty -Name "ComputerName" -Value ""

        $userAccounts += $user    

    }
    
    #After that, delete the NewUsers.csv file 
    Remove-Item -Path $newuserPath

    #Appends new user account information to CurrentUsers.csv
    $userAccounts | Export-Csv -Path $currentuserPath -Append -NoTypeInformation

}