diff --git a/roles/win-initial-setup/tasks/main.yml b/roles/win-initial-setup/tasks/main.yml
index 900ed60..8c65f22 100644
--- a/roles/win-initial-setup/tasks/main.yml
+++ b/roles/win-initial-setup/tasks/main.yml
@@ -39,3 +39,42 @@
       - type: daily
         enabled: true
         start_boundary: "2000-10-10T03:00:00"
+
+- name: Set IIS Header Logging
+  ansible.windows.win_powershell:
+    script: |
+      Add-WebConfigurationProperty `
+        -pspath 'MACHINE/WEBROOT/APPHOST' `
+        -filter "system.applicationHost/sites/siteDefaults/logFile/customFields" `
+        -name "." `
+        -value @{logFieldName='x-forwarded-for';sourceName='x-forwarded-for';sourceType='RequestHeader'}
+
+      Add-WebConfigurationProperty `
+        -pspath 'MACHINE/WEBROOT/APPHOST' `
+        -filter "system.applicationHost/sites/siteDefaults/logFile/customFields" `
+        -name "." `
+        -value @{logFieldName='x-correlation-id';sourceName='x-correlation-id';sourceType='RequestHeader'}
+
+- name: Ensure WebPI Is Installed
+  ansible.windows.win_package:
+    path: https://download.microsoft.com/download/8/4/9/849DBCF2-DFD9-49F5-9A19-9AEE5B29341A/WebPlatformInstaller_x64_en-US.msi
+    product_id: 849DBCF2-DFD9-49F5-9A19-9AEE5B29341A
+    state: present
+
+- name: Ensure Application Request Routing 3.0 Is Installed
+  ansible.windows.win_package:
+    path: https://download.microsoft.com/download/E/9/8/E9849D6A-020E-47E4-9FD0-A023E99B54EB/requestRouter_amd64.msi
+    product_id: E9849D6A-020E-47E4-9FD0-A023E99B54EB
+    state: present
+
+- name: Ensure svc-rmagent Exists
+  ansible.windows.win_user:
+    name: svc-rmagent
+    state: present
+
+- name: Ensure svc-rmagent is in the local Admin Group
+  ansible.windows.win_group_membership:
+    name: Administrators
+    members:
+      - svc-rmagent
+    state: present