diff --git a/vars/windows_default.yml b/vars/windows_default.yml
index 734824f..4185939 100644
--- a/vars/windows_default.yml
+++ b/vars/windows_default.yml
@@ -1,5 +1,6 @@
 ---
+# see https://docs.microsoft.com/de-DE/windows/security/identity-protection/access-control/security-identifiers
 win_base_init__os_groups:
-  - 'S-1-5-32-545'
+  - 'S-1-5-32-545' # Users
   - 'Ansibles'
-  - 'S-1-5-32-544'
+  - 'S-1-5-32-544' # Administrators