diff --git a/roles/scans/tasks/samba.yml b/roles/scans/tasks/samba.yml
index 6cb1881..66b0e6f 100644
--- a/roles/scans/tasks/samba.yml
+++ b/roles/scans/tasks/samba.yml
@@ -8,8 +8,11 @@
   template: dest=/etc/smb.conf src=smb.conf.j2 owner=root group=root mode=0644
   notify: restart samba
 
+- name: samba - create users group
+  group: name=users gid=2000
+
 - name: samba - add smb users
-  user: "name={{ item['name'] }} shell=/bin/false"
+  user: "name={{ item['name'] }} shell=/bin/false group=users"
   with_items: '{{ samba_users }}'
 
 - name: samba - set smbpasswds