diff --git a/ansible/roles/win_client/tasks/chocolatey.yml b/ansible/roles/win_client/tasks/chocolatey.yml
index 2403a88..7cba747 100644
--- a/ansible/roles/win_client/tasks/chocolatey.yml
+++ b/ansible/roles/win_client/tasks/chocolatey.yml
@@ -24,6 +24,7 @@
       win_chocolatey_source:
           name: chocolatey
           state: disabled
+      when: project_zone == 'protected'
 
 - name: Client Packages
   tags: client_packages