diff --git a/linux/compliance.yaml b/linux/compliance.yaml
index 1910f13..c51eb60 100644
--- a/linux/compliance.yaml
+++ b/linux/compliance.yaml
@@ -19,6 +19,7 @@
       user:
         name: ansible
         state: present
+        password_lock: false
 
     # Ansible user SSH pub key
     # This is a really stupid way to do it, but alas.
@@ -42,7 +43,6 @@
         name: nhadmin
         state: present
         password: "{{ nhadmin_password | password_hash('sha512') }}"
-        shell: /bin/bash
 
     # Sysadmin user SSH pub key
     # This is a really stupid way to do it, but alas.