diff --git a/.gitmodules b/.gitmodules
index 6ac64c1..63e03bd 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -34,3 +34,6 @@
 [submodule "roles/do1jlr.win_sshd"]
 	path = roles/do1jlr.win_sshd
 	url = https://backwesen.de/voc/win_ansible_role_sshd.git
+[submodule "roles/do1jlr.win_winerm"]
+	path = roles/do1jlr.win_winerm
+	url = https://backwesen.de/voc/win_ansible_role_winrm.git
diff --git a/roles/do1jlr.win_sshd b/roles/do1jlr.win_sshd
index 61b785c..edd671a 160000
--- a/roles/do1jlr.win_sshd
+++ b/roles/do1jlr.win_sshd
@@ -1 +1 @@
-Subproject commit 61b785cae02215e0d7dc3878da5d792e198a595c
+Subproject commit edd671a7bdc3c5961cb551e9859162aab345d87c
diff --git a/roles/do1jlr.win_winerm b/roles/do1jlr.win_winerm
new file mode 160000
index 0000000..e50ada5
--- /dev/null
+++ b/roles/do1jlr.win_winerm
@@ -0,0 +1 @@
+Subproject commit e50ada51920a97144dcce6453ce1cfa8c402d975
diff --git a/roles/win_warn_ansible_start/tasks/main.yml b/roles/win_warn_ansible_start/tasks/main.yml
index 7a25678..c846062 100644
--- a/roles/win_warn_ansible_start/tasks/main.yml
+++ b/roles/win_warn_ansible_start/tasks/main.yml
@@ -3,6 +3,7 @@
   community.windows.win_msg:
     display_seconds: 60
     msg: Automated upgrade about to start.  Please save your work and log off immeditially
+  changed_when: false
 
 - name: Ensure WinRM starts when the system has settled and is ready to work reliably
   ansible.windows.win_service:
diff --git a/site.yml b/site.yml
index a4172b8..b01a5e4 100644
--- a/site.yml
+++ b/site.yml
@@ -9,6 +9,7 @@
   hosts: obs
   roles:
     - {role: win_warn_ansible_start, tags: [always, warn]}
+    - {role: do1jlr.win_winerm, tags: winrm}
     - {role: do1jlr.win_base_setup, tags: [user, setup]}
     - {role: do1jlr.win_zeroconf, tags: zeroconf}
     - {role: do1jlr.win_firewall_icmp, tags: firewall}