<#
.SYNOPSIS
    Creates the user profile directory (C:\Users\<User>) for an existing
    Windows account WITHOUT requiring an interactive logon.
.PARAMETER UserName
    The account's logon name. Use DOMAIN\User for domain accounts, or just
    the user name for local accounts.
.EXAMPLE
    .\New-UserProfile.ps1 -UserName "LDAWPServiceUser"
.NOTES
    - Must be run from an elevated (Administrator) console.
    - The user account must already exist.
#>
param(
    [Parameter(Mandatory = $true)]
    [string]$UserName
)

# --- Check for administrator privileges ---
$isAdmin = ([Security.Principal.WindowsPrincipal] `
        [Security.Principal.WindowsIdentity]::GetCurrent()
).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
if (-not $isAdmin) {
    Write-Error "Please run this script from an elevated (Administrator) console."
    exit 1
}

# --- Resolve the user's SID ---
try {
    $ntAccount = New-Object System.Security.Principal.NTAccount($UserName)
    $sid = $ntAccount.Translate([System.Security.Principal.SecurityIdentifier]).Value
}
catch {
    Write-Error "Could not resolve the SID for '$UserName'. Does the account exist? ($_)"
    exit 1
}
Write-Host "User : $UserName"
Write-Host "SID  : $sid"

# --- Import CreateProfile via P/Invoke (only once per session) ---
if (-not ([System.Management.Automation.PSTypeName]'Win32.ProfileApi').Type) {
    $signature = @'
[DllImport("userenv.dll", CharSet = CharSet.Unicode, SetLastError = true)]
public static extern int CreateProfile(
    [MarshalAs(UnmanagedType.LPWStr)] string pszUserSid,
    [MarshalAs(UnmanagedType.LPWStr)] string pszUserName,
    [Out][MarshalAs(UnmanagedType.LPWStr)] System.Text.StringBuilder pszProfilePath,
    uint cchProfilePath);
'@
    Add-Type -MemberDefinition $signature -Name "ProfileApi" -Namespace "Win32"
}

# --- Create the profile ---
$accountName = $UserName.Split('\')[-1]
$pathBuffer  = New-Object System.Text.StringBuilder(260)  # MAX_PATH
$result = [Win32.ProfileApi]::CreateProfile($sid, $accountName, $pathBuffer, $pathBuffer.Capacity)

# --- Evaluate the result ---
if ($result -eq 0) {
    Write-Host "Profile created successfully:" -ForegroundColor Green
    Write-Host "  $($pathBuffer.ToString())"
}
else {
    $win32 = $result -band 0xFFFF
    if ($win32 -eq 183) {   # ERROR_ALREADY_EXISTS
        Write-Warning "A profile for '$UserName' already exists - nothing to do."
    }
    else {
        $hex = "0x{0:X8}" -f $result
        Write-Error "CreateProfile failed (HRESULT $hex, Win32 error $win32)."
        exit 1
    }
}