diff --git a/playbook/pxe_server_setup.yml b/playbook/pxe_server_setup.yml
index 31b0201..d80e87f 100644
--- a/playbook/pxe_server_setup.yml
+++ b/playbook/pxe_server_setup.yml
@@ -525,6 +525,14 @@
         state: directory
         mode: '0755'
 
+    - name: "Ensure driver store is owned by pxe (download-drivers.py pushes here over ssh as the pxe user; root/webapp still write it fine)"
+      file:
+        path: "/srv/samba/winpeapps/_shared/Out-of-box Drivers"
+        state: directory
+        owner: pxe
+        group: pxe
+        mode: '0775'
+
     - name: "Deploy BIOS check script + manifest to winpeapps/_shared/BIOS/"
       # Path matches what startnet.cmd reads at WinPE boot:
       #   net use B: \\172.16.9.1\winpeapps\_shared