diff --git a/tasks/lock_root.yml b/tasks/lock_root.yml
index 601aaeffae4efd0e921b7d6d35c755d6dd4aaa0a..8bab4fd20bd4a7a7593a387e30676e03095c09cf 100644
--- a/tasks/lock_root.yml
+++ b/tasks/lock_root.yml
@@ -3,7 +3,9 @@
 - name: Disable root account
   user:
     name: root
-    expires: 1
+    expires: 1.0
+  register: lock_root
+  changed_when: not 'no changes' in lock_root.stderr
 
 - name: Disable root SSH login
   lineinfile: