diff --git a/playbook/pxe_server_setup.yml b/playbook/pxe_server_setup.yml
index aee3935..41257ec 100644
--- a/playbook/pxe_server_setup.yml
+++ b/playbook/pxe_server_setup.yml
@@ -391,6 +391,12 @@
         force: no
       loop: "{{ image_types }}"
 
+    - name: "Daily cron to refresh Media.tag (PESetup.exe 30-day expiry check)"
+      copy:
+        content: "0 0 * * * root find {{ samba_share }}/*/Deploy/Control -name Media.tag -exec touch {} +\n"
+        dest: /etc/cron.d/media-tag-refresh
+        mode: '0644'
+
     - name: "Copy WinPE & boot files from USB (skipped if not present)"
       copy:
         src: "{{ usb_root }}/{{ item.src }}"