- name: Patch Domain Controllers via PSRP
  hosts: domain_controllers
  gather_facts: no   # ✅ Important: disables Python requirement
  tasks:
    - name: Install updates
      command: Install-WindowsUpdate -AcceptAll -AutoReboot