$ErrorActionPreference = 'Stop'
Import-Module ActiveDirectory
$pw = ConvertTo-SecureString 'Lcyaz0KF5L8IoRh7Pf4K.7QQwJq' -AsPlainText -Force
New-ADUser -Name 'svc-msp360' -SamAccountName 'svc-msp360' -UserPrincipalName 'svc-msp360@acg.local' -DisplayName 'MSP360 Backup Service' -Description 'Service account for MSP360/Online Backup Exchange backup on NEPTUNE. Created 2026-07-15 by Howard via ClaudeTools.' -AccountPassword $pw -Enabled $true -PasswordNeverExpires $true -CannotChangePassword $true
Add-ADGroupMember -Identity 'Organization Management' -Members 'svc-msp360'
Start-Sleep -Seconds 2
$u = Get-ADUser 'svc-msp360' -Properties PasswordNeverExpires, MemberOf
Write-Output ('created: ' + $u.SamAccountName + ' enabled=' + $u.Enabled + ' pwdNeverExpires=' + $u.PasswordNeverExpires)
$u.MemberOf | ForEach-Object { Write-Output ('member: ' + $_) }