From db3f126fb307928a62cc49d63525d0d07fb04b7b Mon Sep 17 00:00:00 2001
From: cproudlock <cproudlock@localhost>
Date: Fri, 10 Apr 2026 13:41:23 -0400
Subject: [PATCH] Bump AutoLogonCount from 2 to 4 for reboot margin

The imaging chain needs exactly 2 autologons after the first boot
(sync_intune pre-reboot + post-reboot). Setting to 4 adds 2 extra
reboots of margin for unexpected restarts from Windows Update, PPKG
file operations, or script crashes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 playbook/shopfloor-setup/Run-ShopfloorSetup.ps1 | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/playbook/shopfloor-setup/Run-ShopfloorSetup.ps1 b/playbook/shopfloor-setup/Run-ShopfloorSetup.ps1
index 306e47a..49adb43 100644
--- a/playbook/shopfloor-setup/Run-ShopfloorSetup.ps1
+++ b/playbook/shopfloor-setup/Run-ShopfloorSetup.ps1
@@ -199,9 +199,11 @@ if (Test-Path -LiteralPath $enrollScript) {
     Write-Host "run-enrollment.ps1 not found - skipping enrollment."
 }
 
-# Set auto-logon to expire after 2 more logins
-reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoLogonCount /t REG_DWORD /d 2 /f | Out-Null
-Write-Host "Auto-logon set to 2 remaining logins."
+# Set auto-logon to expire after 4 more logins (2 needed for sync_intune
+# pre-reboot + post-reboot, plus 2 margin for unexpected reboots from
+# Windows Update, PPKG file operations, or script crashes).
+reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoLogonCount /t REG_DWORD /d 4 /f | Out-Null
+Write-Host "Auto-logon set to 4 remaining logins."
 
 Write-Host ""
 Write-Host "================================================================"