diff --git a/ansible/roles/win_domain_membership/tasks/join.yml b/ansible/roles/win_domain_membership/tasks/join.yml
index 0ec572b..20c3f83 100644
--- a/ansible/roles/win_domain_membership/tasks/join.yml
+++ b/ansible/roles/win_domain_membership/tasks/join.yml
@@ -13,6 +13,13 @@
           - "{{ hostvars[dc01_dns].ansible_host }}"
           - "{{ hostvars[dc02_dns].ansible_host }}"
 
+    - name: disable firewall
+      tags: disable_firewall
+      community.windows.win_firewall:
+        state: disabled
+        profiles:
+          - Domain
+
     - name: membership | Joining Fileserver, Choco and WSUS machines to domain
       tags: join_servers
       microsoft.ad.membership: