Renumber PXE LAN from 10.9.100.0/24 to 172.16.9.0/24

Single-site bay-stuck issue at WJ: GE Intune Report IP script filters
Get-NetIPAddress on StartsWith("10.") and posts everything matching
to the GE Tines webhook. Bays at WJ get the PXE LAN 10.9.100.x IP
captured and reported -> GE backend tags bays as on a non-corp 10.x
subnet -> dynamic group eligibility for SFLD policy never matches.
Other GE sites work because their PXE LANs aren't on 10.x at all.

Renumber PXE LAN to RFC1918 172.16.9.0/24 so the GE filter naturally
skips wired PXE addresses without any disable-NIC dance.

Server-side already in flight (netplan dual-bound, dnsmasq scope +
boot URL repointed, blancco preferences + grub.cfg + iPXE GetPxeScript
all sed'd to 172.16.9.1). This commit is the playbook / scripts /
docs side: 109 hits across 35 files sed'd in one shot.

After this lands + boot.wim is rebuilt + bays renumber off DHCP,
the 10.9.100.1 binding will be dropped from netplan as the final
cleanup step.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

playbook/shopfloor-setup/Shopfloor/lib/Disable-WiredNics.ps1

@@ -5,7 +5,7 @@
 #
 # Reason: GE's Intune Proactive-Remediation "Report IP" script enumerates
 # Get-NetIPAddress and POSTs every IP it finds to a GE webhook. When a
-# shopfloor bay is still cabled to the air-gapped PXE LAN (10.9.100.0/24),
+# shopfloor bay is still cabled to the air-gapped PXE LAN (172.16.9.0/24),
 # the webhook sees 10.9.100.x as one of the device's IPs and tags the bay
 # "not on corp net". A dynamic group / assignment-filter at GE then excludes
 # the bay from receiving the SFLD ConfigurationProfile (Function + SasToken

playbook/shopfloor-setup/Shopfloor/lib/Get-PCProfile.ps1

@@ -66,6 +66,15 @@ if (Test-Path -LiteralPath $subtypeFile) {
     $pcSubtype = (Get-Content -LiteralPath $subtypeFile -First 1 -ErrorAction SilentlyContinue).Trim()
 }
 
+# Display sub-type fallback: if pc-subtype.txt is absent (post-rename-reorg
+# default) but display-type.txt exists, use it as the subtype. Lets the
+# Display-Lobby / Display-Dashboard / gea-shopfloor-display-{lobby,dashboard}
+# profile keys resolve correctly for Display PCs.
+$displayTypeFile = 'C:\Enrollment\display-type.txt'
+if (-not $pcSubtype -and ($pcType -ieq 'gea-shopfloor-display' -or $pcType -ieq 'Display') -and (Test-Path -LiteralPath $displayTypeFile)) {
+    $pcSubtype = (Get-Content -LiteralPath $displayTypeFile -First 1 -ErrorAction SilentlyContinue).Trim()
+}
+
 # Build the profile key: "Standard-Machine", "CMM", "Display-Lobby", etc.
 $profileKey = if ($pcSubtype) { "$pcType-$pcSubtype" } else { $pcType }
 
@@ -82,6 +91,8 @@ $pcProfileAliasGroups = @(
     @('WaxAndTrace',        'gea-shopfloor-waxtrace'),
     @('Genspect',           'gea-shopfloor-genspect'),
     @('Display',            'gea-shopfloor-display'),
+    @('Display-Lobby',      'gea-shopfloor-display-Lobby',     'gea-shopfloor-display-lobby'),
+    @('Display-Dashboard',  'gea-shopfloor-display-Dashboard', 'gea-shopfloor-display-dashboard'),
     @('Heattreat',          'gea-shopfloor-heattreat')
 )
 

playbook/shopfloor-setup/Shopfloor/lib/Send-PxeStatus.ps1

@@ -19,7 +19,7 @@ function Send-PxeStatus {
         # Only available post-AAD-join; pass it from Monitor-IntuneProgress
         # once captured. The dashboard renders a QR of this value.
         [string]$IntuneDeviceId = '',
-        [string]$PxeServer = '10.9.100.1',
+        [string]$PxeServer = '172.16.9.1',
         [int]$Port = 9009,
         [int]$TimeoutSec = 5
     )

playbook/shopfloor-setup/Shopfloor/lib/Set-OpenTextAutoStart.ps1

@@ -0,0 +1,44 @@
+# Set-OpenTextAutoStart.ps1 - place WJ Shopfloor.lnk in the All Users
+# Startup folder so HostExplorer's "WJ Shopfloor" session launches at
+# every login. Idempotent: re-running is a no-op when the .lnk already
+# exists at the same path.
+#
+# Used by per-pc-type 09-Setup scripts for shopfloor types whose only
+# business app is OpenText (common, waxtrace, genspect, heattreat).
+# collections + nocollections do NOT auto-start OpenText - their techs
+# pick which apps via Configure-PC.ps1.
+#
+# Source .lnk is created by the OpenText preinstall (Setup-OpenText.ps1)
+# on the public desktop. If the .lnk is missing, log a warning and exit
+# 0 - imaging chain still continues; auto-start can be re-attempted on a
+# subsequent login by re-running this script.
+
+$ErrorActionPreference = 'Continue'
+
+$startupDir    = 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp'
+$publicDesktop = 'C:\Users\Public\Desktop'
+
+$candidates = @(
+    Join-Path $publicDesktop 'WJ Shopfloor.lnk'
+    Join-Path (Join-Path $publicDesktop 'Shopfloor Tools') 'WJ Shopfloor.lnk'
+)
+$src = $candidates | Where-Object { Test-Path -LiteralPath $_ } | Select-Object -First 1
+
+if (-not $src) {
+    Write-Warning "WJ Shopfloor.lnk not found on public desktop - OpenText auto-start NOT configured."
+    Write-Warning "  Searched: $($candidates -join ' ; ')"
+    Write-Warning "  Setup-OpenText.ps1 should create it during preinstall - check OpenText install state."
+    return
+}
+
+if (-not (Test-Path -LiteralPath $startupDir)) {
+    New-Item -Path $startupDir -ItemType Directory -Force | Out-Null
+}
+
+$dst = Join-Path $startupDir 'WJ Shopfloor.lnk'
+try {
+    Copy-Item -LiteralPath $src -Destination $dst -Force
+    Write-Host "OpenText auto-start enabled: $dst (source: $src)"
+} catch {
+    Write-Warning "Failed to copy WJ Shopfloor.lnk to startup: $_"
+}