Commit Graph

  • 719a550be8 Add defensive .gitignore patterns for secrets/keys main cproudlock 2026-04-17 12:50:12 -04:00
  • eca9ee2b36 startnet.cmd: stage udc-backups to WinPE; mirror-from-gold: taxonomy layout cproudlock 2026-04-16 21:37:23 -04:00
  • 6e85e19c85 S: drive mapping via HKLM\Run, autologon-count non-intervention, Phase 4 no-scripts handling cproudlock 2026-04-16 17:42:22 -04:00
  • 2ab6055125 Fix ShopFloor autologon persistence, S: drive mapping, sync throttle cproudlock 2026-04-16 12:29:02 -04:00
  • f73f999938 Unified Common-Enforce for cross-type apps, add WJF Defect Tracker cproudlock 2026-04-16 11:13:05 -04:00
  • 1a5feefb01 CMM: grant Users Modify on PC-DMIS install dirs for non-admin launch cproudlock 2026-04-16 10:38:24 -04:00
  • ac23759486 UDC firewall rules + Acrobat Reader as default PDF viewer cproudlock 2026-04-16 09:18:44 -04:00
  • 85e74e5dd1 UDC settings: pre-stage from server backups, fix arg format, action prompts cproudlock 2026-04-16 08:44:34 -04:00
  • db55bd772a sync_intune: professional UI, IME-based lockdown detection cproudlock 2026-04-16 07:35:22 -04:00
  • a4de11814d Force-Lockdown.bat + S: drive logon mapper for ShopFloor end-user cproudlock 2026-04-15 18:31:18 -04:00
  • a334a56f1e WiFi detection: widen regex to catch hyphen-less 'WiFi' + 802.11 cproudlock 2026-04-15 18:03:19 -04:00
  • c23b803dc6 sync_intune: align Phase 3/5/6 columns; ignore benign 'Failed: 0' tails cproudlock 2026-04-15 17:53:15 -04:00
  • 2db35c2976 UDC: correct CLI arg signature to compact site + dash-prefixed machine# cproudlock 2026-04-15 17:47:57 -04:00
  • 14d103a248 run-enrollment: switch provtool /source from BPRT to PSCmdlet cproudlock 2026-04-15 17:07:12 -04:00
  • 8528a1bcae Install-FromManifest: add FileVersion detection for version-pinned upgrades cproudlock 2026-04-15 16:15:32 -04:00
  • a6648c5a40 sync_intune: full lifecycle gate, lockdown phase, creds verification cproudlock 2026-04-15 16:01:52 -04:00
  • 6db170bf54 Shell defaults + eDNC reg restore from machine-number backups cproudlock 2026-04-15 15:42:21 -04:00
  • 67845372b2 Harvest provtool diagnostics, enable ETW channel, skip Timeclock machine# cproudlock 2026-04-15 14:22:43 -04:00
  • cc9aad0ea1 Install-FromManifest: add Hash detection for content-versioned files cproudlock 2026-04-15 12:37:35 -04:00
  • 3ef981f19e Add Standard-Machine logon enforcer for UDC/eDNC/NTLARS cproudlock 2026-04-15 12:16:17 -04:00
  • 8848fca88a Add Acrobat Reader logon enforcer (cross-PC-type), provtool.exe arg fix cproudlock 2026-04-15 09:24:13 -04:00
  • 0292bc01ad Auto-flush stale SMB/conntrack state on DHCP lease, one-source PPKG model cproudlock 2026-04-15 09:03:16 -04:00
  • 5a9c3db7af run-enrollment.ps1: invoke provtool.exe directly, skip PowerShell cmdlet timeout cproudlock 2026-04-15 08:35:35 -04:00
  • adef507084 Add ARCHITECTURE.md, SITE-CUSTOMIZATION.md, mirror-from-gold.sh cproudlock 2026-04-14 17:56:46 -04:00
  • d6776f7c7f Reorganize repo, enrollment share taxonomy, Blancco USB-build fixes, v4.10 PPKGs cproudlock 2026-04-14 16:01:02 -04:00
  • d14c240b48 Change dnsmasq-restart cron delay from 30s to 15s cproudlock 2026-04-14 13:01:38 -04:00
  • ade2f3b5ff Fix USB install reliability: bash, LV resize, deps, idempotency cproudlock 2026-04-14 12:57:28 -04:00
  • 855af7312b Sub-type aware preinstall, USB drivers/PPKGs, Lab OpenText cproudlock 2026-04-13 15:00:23 -04:00
  • 855d501fc2 Fix Display sync loop, PPKG deployment, dnsmasq cron, dpkg configure cproudlock 2026-04-13 14:27:21 -04:00
  • 743bc91996 Shopfloor Display: move kiosk app install to preinstall system cproudlock 2026-04-13 11:38:59 -04:00
  • 8455c80aa4 Shopfloor preinstall: add Adobe Acrobat Reader DC for all PC types cproudlock 2026-04-13 07:51:21 -04:00
  • f3211dfd29 CMM test iteration: desktop shortcuts, rename to 09-Setup-*, defer NIC re-enable cproudlock 2026-04-11 21:03:09 -04:00
  • b88e4d3272 CMM: patched-MSI install chain for PC-DMIS 2016 + 2019 R2 cproudlock 2026-04-11 16:52:54 -04:00
  • c595d3b9cb Shopfloor unattend: move Orders 4/5 logic to external PS1 scripts cproudlock 2026-04-11 16:50:58 -04:00
  • 3ea20b271e Shopfloor unattend: fix tower (no-WiFi) hang on internet wait cproudlock 2026-04-11 14:25:41 -04:00
  • 18537acbbc PXE server: fix WinPE re-image SMB connection loss cproudlock 2026-04-11 13:00:43 -04:00
  • ee7d3bad66 Shopfloor imaging: CMM type, Configure-PC override fix, serial drivers cproudlock 2026-04-11 12:58:47 -04:00
  • bc123c1066 Machine number input at PXE menu for Standard PCs cproudlock 2026-04-11 08:50:02 -04:00
  • 3d5814cd7c Use marker file instead of task unregister for sync completion cproudlock 2026-04-10 15:09:11 -04:00
  • 6d887346b6 Add Chrome homepage + startup tabs mirroring Edge config cproudlock 2026-04-10 14:56:48 -04:00
  • 07ebe819bd Auto-apply startup items from profile, Configure-PC -MachineNumberOnly cproudlock 2026-04-10 14:54:31 -04:00
  • 15f67063bd Refresh QR code after AAD join detected cproudlock 2026-04-10 14:38:15 -04:00
  • b69d68f7b5 Register sync task BEFORE enrollment (PPKG reboot kills run-enrollment) cproudlock 2026-04-10 14:15:45 -04:00
  • db3f126fb3 Bump AutoLogonCount from 2 to 4 for reboot margin cproudlock 2026-04-10 13:41:23 -04:00
  • c98bbe6532 Remove last em-dash from OpenText README cproudlock 2026-04-10 13:38:58 -04:00
  • c06310f5bd Replace all Unicode characters with ASCII in playbook scripts cproudlock 2026-04-10 13:23:11 -04:00
  • fb5841eb20 run-enrollment: wait for PPKG provisioning before staging chain cproudlock 2026-04-10 12:31:36 -04:00
  • 6c76719a47 Logging, PCTypes, edge profiles for all types cproudlock 2026-04-10 11:57:22 -04:00
  • ed3bfc8234 Lab Workstation: profile-aware Edge homepage + startup tabs cproudlock 2026-04-10 11:49:43 -04:00
  • 7c8eb6899d Shared machine-number helper, site-config for OpenText + PreInstall, placeholder type dirs cproudlock 2026-04-10 11:44:10 -04:00
  • b236b18fbc CMM: share-based installer framework with SFLD credential lookup cproudlock 2026-04-10 11:24:22 -04:00
  • ed803539e0 PC profiles: per-type/sub-type config + Standard Timeclock/Machine menu cproudlock 2026-04-10 11:19:51 -04:00
  • 0aaf049942 Extract site-specific values to site-config.json cproudlock 2026-04-10 11:11:35 -04:00
  • 45ff163eea Fix reboot race + dispatcher owns all reboots cproudlock 2026-04-10 10:58:57 -04:00
  • 3494aa0554 Fix stage gate infinite loop: -FromDispatcher bypass cproudlock 2026-04-10 10:20:20 -04:00
  • 12bcc9b549 Stage gate in Run-ShopfloorSetup + sync retrigger 5min cproudlock 2026-04-10 10:19:34 -04:00
  • b13e34c05a Imaging chain: Stage-Dispatcher + PPKG reboot + unattended sync_intune cproudlock 2026-04-10 09:55:00 -04:00
  • 7c26e10f7e sync_intune: gate reboot prompt on Phase 1+2+3 pre-reboot completion cproudlock 2026-04-10 09:31:11 -04:00
  • e17b3a521d Fix 5 bugs from shopfloor-setup transcript review cproudlock 2026-04-10 09:28:25 -04:00
  • cb2a9d48a1 Shopfloor: Configure-PC tool, machine-number logon prompt, execution order fixes cproudlock 2026-04-10 08:44:28 -04:00
  • 900180cd12 Shopfloor: desktop folder org, taskbar pins, Edge defaults cproudlock 2026-04-09 14:38:38 -04:00
  • b91a0a4bb7 OpenText: skip WJ_Office, IBM_qks, mmcs .hep profiles cproudlock 2026-04-09 14:37:52 -04:00
  • c464f45f4f Shopfloor sync_intune + Set-MachineNumber hardening cproudlock 2026-04-09 13:30:12 -04:00
  • cd00d6d2e1 OpenText: track Setup-OpenText scripts in repo, opt-in KillAfterDetection cproudlock 2026-04-09 12:08:07 -04:00
  • 5eacd1d596 PreInstall runner: surface installer log on EXE failures (LogFile field) cproudlock 2026-04-09 11:19:45 -04:00
  • a33a115394 Move Monitor-IntuneProgress.ps1 to lib/ - it was hanging the dispatcher cproudlock 2026-04-09 11:19:09 -04:00
  • 66d13d8ad0 sync_intune: rewrite as 5-phase status monitor with reboot detection cproudlock 2026-04-09 10:56:20 -04:00
  • 453b42a159 Shopfloor: 05-OfficeShortcuts.ps1 baseline (Excel/Word/PowerPoint) cproudlock 2026-04-09 10:11:08 -04:00
  • 7a27f1a0a1 sync_intune.bat: longer poll interval, in-place status, no sync flood cproudlock 2026-04-09 10:10:51 -04:00
  • a363fa31c0 OpenText: migrate from Intune Win32 LOB to PXE PreInstall + DSC cproudlock 2026-04-09 10:10:35 -04:00
  • b4dd8a4197 VC++ extracted MSIs: bypass LaunchCondition CA via NOVSUI=1 cproudlock 2026-04-09 10:10:11 -04:00
  • 564f14ffcf PreInstall runner: capture real exit codes, surface MSI errors cproudlock 2026-04-09 10:08:42 -04:00
  • 61e0f3a033 Preinstall: extract MSIs for all VC++ redists to suppress reboot cproudlock 2026-04-08 15:01:23 -04:00
  • ded0a7184b Shopfloor scripts: em-dash to hyphen, add positional Level param cproudlock 2026-04-08 14:24:37 -04:00
  • a1a78e2ba3 PXE preinstall pipeline + Set-MachineNumber helper for Standard PCs cproudlock 2026-04-08 14:06:26 -04:00
  • 9c54307b1b Shopfloor cleanups: drop OpenText CSF + MarkZebra, gitignore eMxInfo cproudlock 2026-04-08 14:05:52 -04:00
  • 05fa74574a Intune sync: 3-step lockdown monitor, fix batch detection, remove backup_lockdown cproudlock 2026-03-31 10:52:31 -04:00
  • e3f2bbc6a5 Add QR code display of Intune device ID to sync tool cproudlock 2026-03-31 10:15:20 -04:00
  • 1ba4cce80f Remove shopfloor power and display settings script cproudlock 2026-03-31 09:46:38 -04:00
  • a570efda71 Remove shopfloor Start Menu shortcuts script cproudlock 2026-03-31 09:45:21 -04:00
  • 9912b044a3 Shopfloor: single autologon, clear Start pins, Intune sync tool, update docs cproudlock 2026-03-31 09:43:00 -04:00
  • 163e58ab0b Fix dnsmasq reboot cron: use /etc/cron.d/ instead of crontab cproudlock 2026-03-26 15:03:09 -04:00
  • b7cd0974f1 Blancco 7.15.1 upgrade: native kernel boot, BMC cloud licensing cproudlock 2026-03-26 13:54:25 -04:00
  • 76165495ff Shopfloor PC type system, webapp enhancements, slim Blancco GRUB cproudlock 2026-03-26 11:25:07 -04:00
  • 6d0e6ee284 BIOS check fix, parallel downloads, shopfloor hardening cproudlock 2026-03-23 11:02:36 -04:00
  • 86660a0939 Remove UEFI HTTP Boot config from dnsmasq cproudlock 2026-02-18 11:58:33 -05:00
  • dd2fec5a41 Blancco PXE boot via Ubuntu kernel switch_root cproudlock 2026-02-18 11:20:00 -05:00
  • 15983854ed Add git-crypt encrypted MOK signing keys cproudlock 2026-02-17 12:47:44 -05:00
  • 5d5f5ce267 Add git-crypt encryption for MOK signing keys cproudlock 2026-02-17 12:47:09 -05:00
  • 5de807143b Fix WinPE SMB auth and timeout commands, restore autoinstall disk match cproudlock 2026-02-16 15:32:39 -05:00
  • a4abd238de Harden cloud-init disable and rebuild ISO properly in build-usb cproudlock 2026-02-14 10:53:26 -05:00
  • d3a8e63b36 Fully unattended USB install: patch GRUB and remove cloud-init cproudlock 2026-02-13 21:05:11 -05:00
  • d482cf4d0c Skip autoinstall confirmation prompt and disable cloud-init post-install cproudlock 2026-02-13 20:53:28 -05:00
  • 57a53381f2 Ensure Media.tag exists for all images after import and via cron cproudlock 2026-02-12 16:58:39 -05:00
  • 0da52cb083 Auto-reboot after imaging, auto-download pip-wheels in build scripts cproudlock 2026-02-12 16:56:14 -05:00
  • 093a4d713b Add @reboot to Media.tag refresh cron cproudlock 2026-02-12 16:41:24 -05:00
  • a7636887b1 Add daily cron to refresh Media.tag (30-day expiry workaround) cproudlock 2026-02-12 16:41:07 -05:00
  • 1a5c4f7124 Eliminate USB requirement for WinPE PXE boot, add image upload script cproudlock 2026-02-12 16:40:27 -05:00
  • f4c158a5ac Fix PXE interface detection, add br-pxe bridge to test VM, network upload import cproudlock 2026-02-11 15:15:14 -05:00
  • 7486b9ed66 Apache reverse proxy for webapp, UI improvements cproudlock 2026-02-10 17:45:10 -05:00