diff --git a/.gitmodules b/.gitmodules
index efc6ac1..805f631 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -4,3 +4,6 @@
 [submodule "roles/do1jlr.win_obs_setup"]
 	path = roles/do1jlr.win_obs_setup
 	url = https://backwesen.de/voc/win_ansible_role_obs_setup.git
+[submodule "roles/do1jlr.win_remove_win_apps"]
+	path = roles/do1jlr.win_remove_win_apps
+	url = https://backwesen.de/voc/win_ansible_remove_win_apps.git
diff --git a/host_vars/obs-chrysalis/vars.yml b/host_vars/obs-chrysalis/vars.yml
index 56db5ba..37253da 100644
--- a/host_vars/obs-chrysalis/vars.yml
+++ b/host_vars/obs-chrysalis/vars.yml
@@ -3,3 +3,7 @@ ansible_connection: winrm
 ansible_user: ansible
 ansible_winrm_server_cert_validation: ignore
 ansible_password: "{{ lookup('community.general.passwordstore', 'ansible/windows/' + inventory_hostname + '/login/' + ansible_user) }}"
+
+remove_win_apps__users:
+  - obs
+  - ansible
diff --git a/roles/do1jlr.win_remove_win_apps b/roles/do1jlr.win_remove_win_apps
new file mode 160000
index 0000000..abd1815
--- /dev/null
+++ b/roles/do1jlr.win_remove_win_apps
@@ -0,0 +1 @@
+Subproject commit abd181576e89ed0c2cb852c727384b94c618a0fd
diff --git a/site.yml b/site.yml
index 3144d4e..5e134e7 100644
--- a/site.yml
+++ b/site.yml
@@ -4,3 +4,4 @@
   roles:
     - {role: do1jlr.win_base_setup, tags: [user, setup]}
     - {role: do1jlr.win_obs_setup, tags: [user, obs]}
+    - {role: do1jlr.win_remove_win_apps, tags: cleanup}