diff --git a/ansible/roles/win_domain_controller/tasks/main.yml b/ansible/roles/win_domain_controller/tasks/main.yml
index 7663b70..3fbe0a3 100644
--- a/ansible/roles/win_domain_controller/tasks/main.yml
+++ b/ansible/roles/win_domain_controller/tasks/main.yml
@@ -1,3 +1,4 @@
 ---
 - import_tasks: features.yml
 - import_tasks: setup.yml
+- import_tasks: users.yml
diff --git a/ansible/roles/win_domain_controller/tasks/users.yml b/ansible/roles/win_domain_controller/tasks/users.yml
new file mode 100644
index 0000000..7eae24e
--- /dev/null
+++ b/ansible/roles/win_domain_controller/tasks/users.yml
@@ -0,0 +1,35 @@
+---
+- name: Users
+  tags: post_promotion_users
+  block:
+    - name: Ensure Project Users and Project Groups OUs are present
+      community.windows.win_domain_ou:
+        name: "{{ item }}"
+        path: "DC={{ win_project }},DC=loc"
+        state: present
+        protected: true
+      loop:
+        - Project Users
+        - Project Groups
+        - Disabled Users
+        - Management Computers
+        - User Computers
+
+    - name: Create 'Admin' user 
+      community.windows.win_domain_user:
+        name: admin
+        password: "{{ domain_admin_password }}"
+        state: present
+        password_never_expires: yes
+        groups:
+          - Domain Admins
+
+    - name: Create 'file-transfer' user for *** File Transfer *** script
+      community.windows.win_domain_user:
+        name: file-transfer
+        firstname: File
+        surname: Transfer
+        password: "{{ transfer_user_password }}"
+        state: present
+        password_never_expires: yes
+  when: inventory_hostname in groups['meta-name_dc01']