================================================================================
                        START HERE - READ ME FIRST
================================================================================

                        WinRM HTTPS Deployment Package

================================================================================
WHAT IS THIS?
================================================================================

This folder contains everything needed to deploy WinRM HTTPS (secure PowerShell
remoting) to 175 shopfloor PCs.

================================================================================
QUICK START (3 STEPS)
================================================================================

STEP 1: Add Certificate
------------------------
  >> See: COPY-CERTIFICATE-HERE.txt
  
  Copy the certificate file to this folder:
    wildcard-logon-ds-ge-com-20251017.pfx


STEP 2: Copy to Network Share
------------------------------
  Copy this entire folder to a network share:
  
    Example: \\SERVER\Shares\WinRM-HTTPS
  
  Set permissions: Read access for "Domain Computers"


STEP 3: Deploy to PCs
---------------------
  On each PC:

  OPTION A - SECURE (Recommended for Production):
    1. Navigate to: \\SERVER\Shares\WinRM-HTTPS
    2. Right-click: Deploy-WinRM-HTTPS.bat
    3. Select: "Run as Administrator"
    4. Enter password when prompted
    5. Wait for SUCCESS message

  OPTION B - AUTO-PASSWORD (Testing Only):
    1. Navigate to: \\SERVER\Shares\WinRM-HTTPS
    2. Right-click: Deploy-WinRM-HTTPS-AutoPassword.bat
    3. Select: "Run as Administrator"
    4. No password prompt - runs automatically
    5. Wait for SUCCESS message

    WARNING: Password is hardcoded! Delete after testing!

================================================================================
IMPORTANT FILES
================================================================================

START WITH THESE:
  0-START-HERE.txt              <-- You are here
  COPY-CERTIFICATE-HERE.txt     <-- Add certificate first!
  README-DEPLOYMENT.txt         <-- Deployment instructions
  CHECKLIST.txt                 <-- Track your progress

DEPLOYMENT FILES:
  Deploy-WinRM-HTTPS.bat        <-- Main deployment script
  Test-WinRM-HTTPS.bat          <-- Test script
  Setup-WinRM-HTTPS.ps1         <-- PowerShell setup
  Test-WinRM-HTTPS-Setup.ps1    <-- PowerShell test

DOCUMENTATION:
  NETWORK_SHARE_DEPLOYMENT.md   <-- Detailed guide

REQUIRED (Add manually):
  wildcard-*.pfx                <-- CERTIFICATE - MUST ADD!

================================================================================
CERTIFICATE PASSWORD
================================================================================

Password: XqHuyaLZSyCYEcpsMz6h5

Keep this secure! Store in password manager for production use.

================================================================================
BATCH EXECUTION POLICY
================================================================================

The batch files (.bat) automatically run PowerShell scripts with:
  -ExecutionPolicy Bypass

This allows the scripts to run without requiring execution policy changes
on each PC. The scripts will run even if execution policy is Restricted.

================================================================================
SUPPORT
================================================================================

For help:
  - Read: README-DEPLOYMENT.txt
  - Read: NETWORK_SHARE_DEPLOYMENT.md
  - Check parent folder for troubleshooting guides

================================================================================
DEPLOYMENT WORKFLOW
================================================================================

  [ ] 1. Add certificate to this folder
  [ ] 2. Copy folder to network share
  [ ] 3. Test on 3-5 PCs
  [ ] 4. Verify connections work
  [ ] 5. Deploy to remaining PCs in batches
  [ ] 6. Track progress in CHECKLIST.txt
  [ ] 7. Verify all deployments
  [ ] 8. Clean up (remove certificate from share)

================================================================================
READY TO START?
================================================================================

Next: Read COPY-CERTIFICATE-HERE.txt to add the certificate file.

================================================================================