diff --git a/playbook.yml b/playbook.yml
index 728636d..cad991d 100644
--- a/playbook.yml
+++ b/playbook.yml
@@ -87,6 +87,39 @@
       with_items:
         - { rule: 'allow', port: '53'}
 
+    - name: disable mounting of usb flash drives
+      file:
+        path: /media
+        owner: root
+        mode: '700' 
+
+    - name: create user group pruefung
+      group:
+        name: "pruefung"
+        state: present
+
+    - name: create user student
+      ansible.builtin.user:
+        name: "pruefung"
+        password: "morz"
+        shell: /bin/bash
+        comment: Prüfungsbenutzer
+        group: pruefung
+
+    - name: create .config  dir for created user
+      file:
+        path: "/home/pruefung/.config/"
+        state: directory
+        mode: "700"
+        owner: "pruefung"
+        group: "pruefung"
+
+
+    - name: make sure libreoffice uses ower template. spacing, border, font,... 
+      ansible.builtin.lineinfile:
+        path: /usr/share/applications/libreoffice-writer.desktop 
+        regexp: 'Exec=libreoffice --writer %U'
+        line: Exec=libreoffice --writer %U -n /home/pruefung/Pruefung.ott
 
     - name: purge some prior installed packages
       apt: 
@@ -95,8 +128,7 @@
           - task-german-kde-desktop
           - task-german-desktop
           - xdg-desktop-portal-kde
-          - xdg-desktop-portal-wlr # share screen in browser
-          - kde-full
+          - xdg-desktop-portal-wlr
           - akonadi-backend-sqlite
           - thunderbird-l10n-de
           - webext-privacy-badger