diff --git a/roles/xrdp_apphost/tasks/main.yml b/roles/xrdp_apphost/tasks/main.yml
index e88d118..5d0231e 100644
--- a/roles/xrdp_apphost/tasks/main.yml
+++ b/roles/xrdp_apphost/tasks/main.yml
@@ -1,5 +1,13 @@
 ---
 
+- name: Set Default umask for Users
+  lineinfile:
+    dest: '/etc/login.defs'
+    regexp: "UMASK"
+    line: "UMASK 027"
+    state: present
+
+
 - include: xrdp.yml
 - include: lightburn.yml
 - include: estlcam.yml