diff --git a/ansible/roles/win_initial/tasks/initial.yml b/ansible/roles/win_initial/tasks/initial.yml
index a6231f6..0c0abcf 100644
--- a/ansible/roles/win_initial/tasks/initial.yml
+++ b/ansible/roles/win_initial/tasks/initial.yml
@@ -37,7 +37,7 @@
     bypass:
     - <local>
   when: |
-    inventory_hostname in groups['meta-type_client'] and
+    inventory_hostname in groups['meta-type_client']|default([]) and
     project_zone == 'protected'
 
 - name: Remove Local Admin