diff --git a/playbook/shopfloor-setup/gea-shopfloor-cmm/Install-DODA.ps1 b/playbook/shopfloor-setup/gea-shopfloor-cmm/Install-DODA.ps1
index 1661704..c1980d6 100644
--- a/playbook/shopfloor-setup/gea-shopfloor-cmm/Install-DODA.ps1
+++ b/playbook/shopfloor-setup/gea-shopfloor-cmm/Install-DODA.ps1
@@ -39,6 +39,16 @@ if (-not (Test-Path $preProcess)) {
     Write-Host "Created $preProcess"
 }
 
+# MergeFiles.exe writes into PreProcess\ at runtime AS THE LOCKED-DOWN OPERATOR,
+# not admin. Without write access the GetDoDAFolder/merge step fails. Grant
+# Users + Authenticated Users Full (object+container inherit). SIDs, not names,
+# to stay locale-independent. Applied every run so it re-asserts after any
+# lockdown pass that strips the ACE.
+foreach ($sid in '*S-1-5-32-545','*S-1-5-11') {   # BUILTIN\Users, NT AUTHORITY\Authenticated Users
+    & icacls $preProcess /grant "${sid}:(OI)(CI)F" /T /C 2>&1 | Out-Null
+}
+Write-Host "Granted Users + Authenticated Users Full on $preProcess"
+
 if (Test-Path (Join-Path $installDir 'DovetailAnalysis.exe')) {
     Write-Host "DovetailAnalysis.exe verified present"
     exit 0
diff --git a/playbook/shopfloor-setup/gea-shopfloor-cmm/cmm-bay-config.csv b/playbook/shopfloor-setup/gea-shopfloor-cmm/cmm-bay-config.csv
index 38a998c..9f666b9 100644
--- a/playbook/shopfloor-setup/gea-shopfloor-cmm/cmm-bay-config.csv
+++ b/playbook/shopfloor-setup/gea-shopfloor-cmm/cmm-bay-config.csv
@@ -2,12 +2,12 @@ cmm_id,pcdmis_version,doda,part_group
 CMM1,2019,no,S:\CMM\CMM1\HPTCMM1
 CMM2,2019,no,S:\CMM\CMM2\HPT
 CMM3,2019,no,S:\CMM\CMM3\VENTURE_CMM3
-CMM4,2016,no,S:\CMM\CMM4\Spool
+CMM4,2016,yes,S:\CMM\CMM4\Spool
 CMM5,2019,no,S:\CMM\CMM5\BLISKCMM5
 CMM6,2019,no,S:\CMM\CMM6\BLISKCMM6
 CMM7,2019,no,S:\CMM\CMM7\VENTURE_CMM7
 CMM8,2019,no,S:\CMM\CMM8\Venture CMM8
 CMM9,2019,no,S:\CMM\CMM9\BLISKCMM9
-CMM10,2016,no,S:\CMM\CMM10\Spool
-CMM11,2026,no,S:\CMM\CMM11\Spool
-CMM12,2026,no,S:\CMM\CMM12\Spool
+CMM10,2016,yes,S:\CMM\CMM10\Spool
+CMM11,2026,yes,S:\CMM\CMM11\Spool
+CMM12,2026,yes,S:\CMM\CMM12\Spool
diff --git a/playbook/shopfloor-setup/gea-shopfloor-cmm/cmm-manifest.json b/playbook/shopfloor-setup/gea-shopfloor-cmm/cmm-manifest.json
index c393ea3..57b6d8c 100644
--- a/playbook/shopfloor-setup/gea-shopfloor-cmm/cmm-manifest.json
+++ b/playbook/shopfloor-setup/gea-shopfloor-cmm/cmm-manifest.json
@@ -67,9 +67,9 @@
       "DetectionPath": "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{94f02b85-bbca-422e-9b8b-0c16a769eced}"
     },
     {
-      "_comment": "DODA - Dovetail Digital Analysis. Deployed as a flat file extract to C:\\Apps\\DODA\\. Only installed when doda.txt=yes (pc-subtype.txt=doda gates this via PCTypes).",
+      "_comment": "DODA - Dovetail Digital Analysis. Deployed as a flat file extract to C:\\Apps\\DODA\\. Only installed when doda.txt=yes -> startnet writes pc-subtype.txt=doda -> 09-Setup passes PCType=gea-shopfloor-cmm + PCSubType=doda -> matcher builds 'gea-shopfloor-cmm-doda'. PCTypes MUST be that exact Type-SubType string ('cmm-doda' never matched - the alias of gea-shopfloor-cmm is bare 'CMM', no subtype variant).",
       "Name": "DODA",
-      "PCTypes": ["cmm-doda"],
+      "PCTypes": ["gea-shopfloor-cmm-doda"],
       "Type": "PS1",
       "Script": "Install-DODA.ps1",
       "DetectionMethod": "File",