diff --git a/host_vars/obs-chrysalis/vars.yml b/host_vars/obs-chrysalis/vars.yml
new file mode 100644
index 0000000..3bec6e8
--- /dev/null
+++ b/host_vars/obs-chrysalis/vars.yml
@@ -0,0 +1,5 @@
+---
+ansible_connection: winrm
+ansible_user: ansible
+ansible_winrm_server_cert_validation: ignore
+ansible_password: "{{ lookup('community.general.passwordstore', 'ansible/windows/' + inventory_hostname + '/password') }}"
diff --git a/hosts.ini b/hosts.ini
new file mode 100644
index 0000000..6ec77d6
--- /dev/null
+++ b/hosts.ini
@@ -0,0 +1,2 @@
+[obs]
+obs-chrysalis ansible_host=10.10.0.225
diff --git a/roles/do1jlr.win_base_setup b/roles/do1jlr.win_base_setup
index a1e0cea..64a25c2 160000
--- a/roles/do1jlr.win_base_setup
+++ b/roles/do1jlr.win_base_setup
@@ -1 +1 @@
-Subproject commit a1e0cea8210a11725b40db0a59769bb1331a156a
+Subproject commit 64a25c272e08feb36d71ec4dccabaee6fe0c04c1
diff --git a/site.yml b/site.yml
new file mode 100644
index 0000000..d5fc01b
--- /dev/null
+++ b/site.yml
@@ -0,0 +1,5 @@
+---
+- name: deploy windows users and basic config
+  hosts: obs
+  roles:
+    - {role: do1jlr.win_base_setup, tags: [user, setup]}