powershell script to sync AD group members in multiple domains

Sync group members from one master AD to multiple AD domains where samaccountname is identical. The purpose of the script is to keep the target groups members identical to the source group, excluding exceptional cases. The script must use a secure string for accounts to connect different domains. Script parameters allow you to specify the target domains against which to sync. Several domains can be specified as ones for the same run. whatif for testing purpose must be included in the script. Each target domain must have its own configuration file where it is possible to define the following information for several groups: source group, target group, exception allowed in target group and comment. The exception in this case is that such identifiers can be left as members in the target group, if extensionattribute1 contains a couple of string options, even if the identifiers are not found in the source group. The script should create a log file of the changes per domain. The script will be run on a schedule every hour.