win-playbook.yaml

- hosts: all
  remote_user: Administrator
  tasks:

  # install packages  
  - name: install google chrome
    chocolatey.chocolatey.win_chocolatey:
      name:
      - googlechrome
      - notepadplusplus
  
  # update windows
  - name: Install all security, critical, and rollup updates without a scheduled task
    ansible.windows.win_updates:
      category_names:
        - SecurityUpdates
        - CriticalUpdates
        - UpdateRollups
  
  # One way to ensure the system is reliable just after a reboot, is to set WinRM to a delayed startup
  - name: Ensure WinRM starts when the system has settled and is ready to work reliably
    ansible.windows.win_service:
      name: WinRM
      start_mode: delayed

  # Optionally, you can increase the reboot_timeout to survive long updates during reboot
  - name: Ensure we wait long enough for the updates to be applied during reboot
    ansible.windows.win_updates:
      reboot: yes
      reboot_timeout: 3600