diff --git a/tasks/main.yml b/tasks/main.yml
index b2ede93..750a798 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -45,22 +45,6 @@
   notify:
     - 'ensure_sudo.package_facts'
     - 'ensure_sudo.service_facts'
-- name: 'ensure services'
-  when:
-    - ansible_system == 'Linux'
-    - ensure_sudo is defined
-    - ensure_sudo.service_list is defined
-    - ensure_sudo.service_list is iterable
-  ansible.builtin.service:
-    enabled: '{{ item.enabled }}'
-    name: '{{ item.name }}'
-    state: '{{ item.state }}'
-  loop: '{{ ensure_sudo.service_list }}'
-  loop_control:
-    label: '{{ item.name }} will be {{ item.state }}'
-  notify:
-    - 'ensure_sudo.package_facts'
-    - 'ensure_sudo.service_facts'
 - name: 'ensure configurations'
   when:
     - ansible_system == 'Linux'
@@ -86,6 +70,22 @@
     - 'ensure_sudo.service_facts'
 - name: 'flush handlers'
   meta: 'flush_handlers'
+- name: 'ensure services'
+  when:
+    - ansible_system == 'Linux'
+    - ensure_sudo is defined
+    - ensure_sudo.service_list is defined
+    - ensure_sudo.service_list is iterable
+  ansible.builtin.service:
+    enabled: '{{ item.enabled }}'
+    name: '{{ item.name }}'
+    state: '{{ item.state }}'
+  loop: '{{ ensure_sudo.service_list }}'
+  loop_control:
+    label: '{{ item.name }} will be {{ item.state }}'
+  notify:
+    - 'ensure_sudo.package_facts'
+    - 'ensure_sudo.service_facts'
 - name: 'find directories over log retention window under /var/log/sudo-io'
   when:
     - ansible_system == 'Linux'