From 335f9ad923b1ab7ec7438db85ee49d977bf94d65 Mon Sep 17 00:00:00 2001
From: abrown38 <a.brown@epcc.ed.ac.uk>
Date: Wed, 14 Aug 2024 16:17:44 +0100
Subject: [PATCH] Move ADMX task to start. copy failed after promotion, files
 were open

---
 .../win_domain_controller/tasks/setup.yml     | 19 +++++++++----------
 1 file changed, 9 insertions(+), 10 deletions(-)

diff --git a/ansible/roles/win_domain_controller/tasks/setup.yml b/ansible/roles/win_domain_controller/tasks/setup.yml
index a2beade..9c8b6c4 100644
--- a/ansible/roles/win_domain_controller/tasks/setup.yml
+++ b/ansible/roles/win_domain_controller/tasks/setup.yml
@@ -1,4 +1,13 @@
 ---
+- name: Copy ADMX/ADML files
+  tags: copy_admx
+  block:
+    - name: Copy ADMX and ADML files to DCs
+      win_copy:
+        src: policy_templates/PolicyDefinitions
+        dest: "C:\\Windows\\SYSVOL\\sysvol\\{{ win_project }}.loc\\policies\\"
+        force: true
+
 - name: Promote DC01
   tags: promote_dc01
   block:
@@ -111,13 +120,3 @@
       win_shell: powershell C:\eidf\{{ server_hardening_script }}
       tags: apply_hardening_scripts
   when: inventory_hostname in groups['meta-name_dc01']
-
-- name: Copy ADMX/ADML files
-  tags: copy_admx
-  block:
-    - name: Copy ADMX and ADML files to DCs
-      win_copy:
-        src: policy_templates/PolicyDefinitions
-        dest: "C:\\Windows\\SYSVOL\\sysvol\\{{ win_project }}.loc\\policies\\"
-        force: true
-