---


- name: Install base packages
  win_chocolatey:
    name: 
      - "{{ windows_base_packages_item }}"
    state: present
  loop: "{{ windows_base_packages }}"
  loop_control:
    loop_var: windows_base_packages_item

- name: Install Server Services
  ansible.windows.win_feature:
    name:
      - "{{ windows_features_item }}"
    state: present    
  loop: "{{ windows_features }}"
  loop_control:
    loop_var: windows_features_item

- name: Disable ms_tcpip6 of all the Interface
  community.windows.win_net_adapter_feature:
    interface: '*'
    state: disabled
    component_id:
      - ms_tcpip6

- name: disable IE Enhanced Security
  block:

  - name: disable for user
    win_shell: 'Set-ItemProperty -Path "HKLM:\\SOFTWARE\\Microsoft\\Active Setup\\Installed Components\\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}" -Name "IsInstalled" -Value 0'

  - name: disable for admin
    win_shell: 'Set-ItemProperty -Path "HKLM:\\SOFTWARE\\Microsoft\\Active Setup\\Installed Components\\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}" -Name "IsInstalled" -Value 0'

- name: disable automatic updates
  ansible.windows.win_regedit:
    path: HKLM:\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
    name: NoAutoUpdate
    data: 1

- name: disable Firewall
  win_shell: "netsh advfirewall set allprofiles state off"
  

...