ADpasswordSetting

# Define variables
$OutputFile = "C:\TeamX_UserPasswords.txt"  # Replace X with your team number
$Domain = "YOURDOMAIN.local"               # Replace with your AD domain
$ExcludeUsers = @("dd-agent", "whiteteam", "blackteam", "grayteam", "datadog") # Excluded accounts

# Function to generate predetermined passwords
function Generate-PasswordList {
    param (
        [string]$OutputFile,
        [int]$PasswordLength = 16
    )

    # Import Active Directory module
    Import-Module ActiveDirectory

    # Get all users in the domain (limit to your team's OU)
    $users = Get-ADUser -Filter * -SearchBase "OU=YourTeamOU,DC=YOURDOMAIN,DC=local" -Properties *

    $passwordList = @()

    foreach ($user in $users) {
        if ($user.SamAccountName -notin $ExcludeUsers) {
            # Generate a random password for each user
            $newPassword = [System.Web.Security.Membership]::GeneratePassword($PasswordLength, 3)

            # Save the username-password pair
            $passwordList += @{
                Username = $user.SamAccountName
                Password = $newPassword
            }
        }
    }

    # Export the password list to the file
    $passwordList | Export-Csv -Path $OutputFile -NoTypeInformation -Encoding UTF8
    Write-Host "Password list generated and saved to $OutputFile" -ForegroundColor Green
}

# Function to set passwords for users using the generated password list
function Set-PasswordsFromList {
    param (
        [string]$PasswordFile
    )

    # Check if the file exists
    if (-Not (Test-Path $PasswordFile)) {
        Write-Host "Password file not found: $PasswordFile" -ForegroundColor Red
        return
    }

    # Import the password list
    $passwordList = Import-Csv -Path $PasswordFile

    # Import Active Directory module
    Import-Module ActiveDirectory

    foreach ($entry in $passwordList) {
        $username = $entry.Username
        $password = $entry.Password

        try {
            # Set the new password for the user
            Set-ADAccountPassword -Identity $username -NewPassword (ConvertTo-SecureString -AsPlainText $password -Force) -Reset
            Write-Host "Password updated for user $username" -ForegroundColor Green
        } catch {
            Write-Host "Failed to update password for $username: $_" -ForegroundColor Red
        }
    }
    Write-Host "All passwords have been updated based on the list." -ForegroundColor Cyan
}

# Main menu
Write-Host "Choose an action:" -ForegroundColor Yellow
Write-Host "1. Generate Password List"
Write-Host "2. Set Passwords from List"
$choice = Read-Host "Enter your choice (1 or 2)"

switch ($choice) {
    1 {
        # Generate password list
        Generate-PasswordList -OutputFile $OutputFile
    }
    2 {
        # Set passwords from the existing list
        Set-PasswordsFromList -PasswordFile $OutputFile
    }
    default {
        Write-Host "Invalid choice. Exiting." -ForegroundColor Red
    }
}