diff --git a/roles/users/tasks/main.yml b/roles/users/tasks/main.yml
index 8d1cbb9..a9ca606 100644
--- a/roles/users/tasks/main.yml
+++ b/roles/users/tasks/main.yml
@@ -16,9 +16,10 @@
 - name: Enable sudoers.d subdir
   ansible.builtin.lineinfile:
     path: /etc/sudoers
+    state: present
     regexp: '^#includedir'
     line: 'includedir /etc/sudoers.d'
-    validate: 'visudo -cf %s'
+    validate: /usr/sbin/visudo -cf %s
 
 - name: Ensure user "rulrich" exists
   ansible.builtin.user: