-
719a550be8
Add defensive .gitignore patterns for secrets/keys
main
cproudlock
2026-04-17 12:50:12 -04:00
-
eca9ee2b36
startnet.cmd: stage udc-backups to WinPE; mirror-from-gold: taxonomy layout
cproudlock
2026-04-16 21:37:23 -04:00
-
6e85e19c85
S: drive mapping via HKLM\Run, autologon-count non-intervention, Phase 4 no-scripts handling
cproudlock
2026-04-16 17:42:22 -04:00
-
2ab6055125
Fix ShopFloor autologon persistence, S: drive mapping, sync throttle
cproudlock
2026-04-16 12:29:02 -04:00
-
f73f999938
Unified Common-Enforce for cross-type apps, add WJF Defect Tracker
cproudlock
2026-04-16 11:13:05 -04:00
-
1a5feefb01
CMM: grant Users Modify on PC-DMIS install dirs for non-admin launch
cproudlock
2026-04-16 10:38:24 -04:00
-
ac23759486
UDC firewall rules + Acrobat Reader as default PDF viewer
cproudlock
2026-04-16 09:18:44 -04:00
-
85e74e5dd1
UDC settings: pre-stage from server backups, fix arg format, action prompts
cproudlock
2026-04-16 08:44:34 -04:00
-
db55bd772a
sync_intune: professional UI, IME-based lockdown detection
cproudlock
2026-04-16 07:35:22 -04:00
-
a4de11814d
Force-Lockdown.bat + S: drive logon mapper for ShopFloor end-user
cproudlock
2026-04-15 18:31:18 -04:00
-
a334a56f1e
WiFi detection: widen regex to catch hyphen-less 'WiFi' + 802.11
cproudlock
2026-04-15 18:03:19 -04:00
-
c23b803dc6
sync_intune: align Phase 3/5/6 columns; ignore benign 'Failed: 0' tails
cproudlock
2026-04-15 17:53:15 -04:00
-
2db35c2976
UDC: correct CLI arg signature to compact site + dash-prefixed machine#
cproudlock
2026-04-15 17:47:57 -04:00
-
14d103a248
run-enrollment: switch provtool /source from BPRT to PSCmdlet
cproudlock
2026-04-15 17:07:12 -04:00
-
8528a1bcae
Install-FromManifest: add FileVersion detection for version-pinned upgrades
cproudlock
2026-04-15 16:15:32 -04:00
-
a6648c5a40
sync_intune: full lifecycle gate, lockdown phase, creds verification
cproudlock
2026-04-15 16:01:52 -04:00
-
6db170bf54
Shell defaults + eDNC reg restore from machine-number backups
cproudlock
2026-04-15 15:42:21 -04:00
-
67845372b2
Harvest provtool diagnostics, enable ETW channel, skip Timeclock machine#
cproudlock
2026-04-15 14:22:43 -04:00
-
cc9aad0ea1
Install-FromManifest: add Hash detection for content-versioned files
cproudlock
2026-04-15 12:37:35 -04:00
-
3ef981f19e
Add Standard-Machine logon enforcer for UDC/eDNC/NTLARS
cproudlock
2026-04-15 12:16:17 -04:00
-
8848fca88a
Add Acrobat Reader logon enforcer (cross-PC-type), provtool.exe arg fix
cproudlock
2026-04-15 09:24:13 -04:00
-
0292bc01ad
Auto-flush stale SMB/conntrack state on DHCP lease, one-source PPKG model
cproudlock
2026-04-15 09:03:16 -04:00
-
5a9c3db7af
run-enrollment.ps1: invoke provtool.exe directly, skip PowerShell cmdlet timeout
cproudlock
2026-04-15 08:35:35 -04:00
-
adef507084
Add ARCHITECTURE.md, SITE-CUSTOMIZATION.md, mirror-from-gold.sh
cproudlock
2026-04-14 17:56:46 -04:00
-
d6776f7c7f
Reorganize repo, enrollment share taxonomy, Blancco USB-build fixes, v4.10 PPKGs
cproudlock
2026-04-14 16:01:02 -04:00
-
d14c240b48
Change dnsmasq-restart cron delay from 30s to 15s
cproudlock
2026-04-14 13:01:38 -04:00
-
ade2f3b5ff
Fix USB install reliability: bash, LV resize, deps, idempotency
cproudlock
2026-04-14 12:57:28 -04:00
-
855af7312b
Sub-type aware preinstall, USB drivers/PPKGs, Lab OpenText
cproudlock
2026-04-13 15:00:23 -04:00
-
855d501fc2
Fix Display sync loop, PPKG deployment, dnsmasq cron, dpkg configure
cproudlock
2026-04-13 14:27:21 -04:00
-
743bc91996
Shopfloor Display: move kiosk app install to preinstall system
cproudlock
2026-04-13 11:38:59 -04:00
-
8455c80aa4
Shopfloor preinstall: add Adobe Acrobat Reader DC for all PC types
cproudlock
2026-04-13 07:51:21 -04:00
-
f3211dfd29
CMM test iteration: desktop shortcuts, rename to 09-Setup-*, defer NIC re-enable
cproudlock
2026-04-11 21:03:09 -04:00
-
b88e4d3272
CMM: patched-MSI install chain for PC-DMIS 2016 + 2019 R2
cproudlock
2026-04-11 16:52:54 -04:00
-
c595d3b9cb
Shopfloor unattend: move Orders 4/5 logic to external PS1 scripts
cproudlock
2026-04-11 16:50:58 -04:00
-
3ea20b271e
Shopfloor unattend: fix tower (no-WiFi) hang on internet wait
cproudlock
2026-04-11 14:25:41 -04:00
-
18537acbbc
PXE server: fix WinPE re-image SMB connection loss
cproudlock
2026-04-11 13:00:43 -04:00
-
ee7d3bad66
Shopfloor imaging: CMM type, Configure-PC override fix, serial drivers
cproudlock
2026-04-11 12:58:47 -04:00
-
bc123c1066
Machine number input at PXE menu for Standard PCs
cproudlock
2026-04-11 08:50:02 -04:00
-
3d5814cd7c
Use marker file instead of task unregister for sync completion
cproudlock
2026-04-10 15:09:11 -04:00
-
6d887346b6
Add Chrome homepage + startup tabs mirroring Edge config
cproudlock
2026-04-10 14:56:48 -04:00
-
07ebe819bd
Auto-apply startup items from profile, Configure-PC -MachineNumberOnly
cproudlock
2026-04-10 14:54:31 -04:00
-
15f67063bd
Refresh QR code after AAD join detected
cproudlock
2026-04-10 14:38:15 -04:00
-
b69d68f7b5
Register sync task BEFORE enrollment (PPKG reboot kills run-enrollment)
cproudlock
2026-04-10 14:15:45 -04:00
-
db3f126fb3
Bump AutoLogonCount from 2 to 4 for reboot margin
cproudlock
2026-04-10 13:41:23 -04:00
-
c98bbe6532
Remove last em-dash from OpenText README
cproudlock
2026-04-10 13:38:58 -04:00
-
c06310f5bd
Replace all Unicode characters with ASCII in playbook scripts
cproudlock
2026-04-10 13:23:11 -04:00
-
fb5841eb20
run-enrollment: wait for PPKG provisioning before staging chain
cproudlock
2026-04-10 12:31:36 -04:00
-
6c76719a47
Logging, PCTypes, edge profiles for all types
cproudlock
2026-04-10 11:57:22 -04:00
-
ed3bfc8234
Lab Workstation: profile-aware Edge homepage + startup tabs
cproudlock
2026-04-10 11:49:43 -04:00
-
7c8eb6899d
Shared machine-number helper, site-config for OpenText + PreInstall, placeholder type dirs
cproudlock
2026-04-10 11:44:10 -04:00
-
b236b18fbc
CMM: share-based installer framework with SFLD credential lookup
cproudlock
2026-04-10 11:24:22 -04:00
-
ed803539e0
PC profiles: per-type/sub-type config + Standard Timeclock/Machine menu
cproudlock
2026-04-10 11:19:51 -04:00
-
0aaf049942
Extract site-specific values to site-config.json
cproudlock
2026-04-10 11:11:35 -04:00
-
45ff163eea
Fix reboot race + dispatcher owns all reboots
cproudlock
2026-04-10 10:58:57 -04:00
-
3494aa0554
Fix stage gate infinite loop: -FromDispatcher bypass
cproudlock
2026-04-10 10:20:20 -04:00
-
12bcc9b549
Stage gate in Run-ShopfloorSetup + sync retrigger 5min
cproudlock
2026-04-10 10:19:34 -04:00
-
b13e34c05a
Imaging chain: Stage-Dispatcher + PPKG reboot + unattended sync_intune
cproudlock
2026-04-10 09:55:00 -04:00
-
7c26e10f7e
sync_intune: gate reboot prompt on Phase 1+2+3 pre-reboot completion
cproudlock
2026-04-10 09:31:11 -04:00
-
e17b3a521d
Fix 5 bugs from shopfloor-setup transcript review
cproudlock
2026-04-10 09:28:25 -04:00
-
cb2a9d48a1
Shopfloor: Configure-PC tool, machine-number logon prompt, execution order fixes
cproudlock
2026-04-10 08:44:28 -04:00
-
900180cd12
Shopfloor: desktop folder org, taskbar pins, Edge defaults
cproudlock
2026-04-09 14:38:38 -04:00
-
b91a0a4bb7
OpenText: skip WJ_Office, IBM_qks, mmcs .hep profiles
cproudlock
2026-04-09 14:37:52 -04:00
-
c464f45f4f
Shopfloor sync_intune + Set-MachineNumber hardening
cproudlock
2026-04-09 13:30:12 -04:00
-
cd00d6d2e1
OpenText: track Setup-OpenText scripts in repo, opt-in KillAfterDetection
cproudlock
2026-04-09 12:08:07 -04:00
-
5eacd1d596
PreInstall runner: surface installer log on EXE failures (LogFile field)
cproudlock
2026-04-09 11:19:45 -04:00
-
a33a115394
Move Monitor-IntuneProgress.ps1 to lib/ - it was hanging the dispatcher
cproudlock
2026-04-09 11:19:09 -04:00
-
66d13d8ad0
sync_intune: rewrite as 5-phase status monitor with reboot detection
cproudlock
2026-04-09 10:56:20 -04:00
-
453b42a159
Shopfloor: 05-OfficeShortcuts.ps1 baseline (Excel/Word/PowerPoint)
cproudlock
2026-04-09 10:11:08 -04:00
-
7a27f1a0a1
sync_intune.bat: longer poll interval, in-place status, no sync flood
cproudlock
2026-04-09 10:10:51 -04:00
-
a363fa31c0
OpenText: migrate from Intune Win32 LOB to PXE PreInstall + DSC
cproudlock
2026-04-09 10:10:35 -04:00
-
b4dd8a4197
VC++ extracted MSIs: bypass LaunchCondition CA via NOVSUI=1
cproudlock
2026-04-09 10:10:11 -04:00
-
564f14ffcf
PreInstall runner: capture real exit codes, surface MSI errors
cproudlock
2026-04-09 10:08:42 -04:00
-
61e0f3a033
Preinstall: extract MSIs for all VC++ redists to suppress reboot
cproudlock
2026-04-08 15:01:23 -04:00
-
ded0a7184b
Shopfloor scripts: em-dash to hyphen, add positional Level param
cproudlock
2026-04-08 14:24:37 -04:00
-
a1a78e2ba3
PXE preinstall pipeline + Set-MachineNumber helper for Standard PCs
cproudlock
2026-04-08 14:06:26 -04:00
-
9c54307b1b
Shopfloor cleanups: drop OpenText CSF + MarkZebra, gitignore eMxInfo
cproudlock
2026-04-08 14:05:52 -04:00
-
05fa74574a
Intune sync: 3-step lockdown monitor, fix batch detection, remove backup_lockdown
cproudlock
2026-03-31 10:52:31 -04:00
-
e3f2bbc6a5
Add QR code display of Intune device ID to sync tool
cproudlock
2026-03-31 10:15:20 -04:00
-
1ba4cce80f
Remove shopfloor power and display settings script
cproudlock
2026-03-31 09:46:38 -04:00
-
a570efda71
Remove shopfloor Start Menu shortcuts script
cproudlock
2026-03-31 09:45:21 -04:00
-
9912b044a3
Shopfloor: single autologon, clear Start pins, Intune sync tool, update docs
cproudlock
2026-03-31 09:43:00 -04:00
-
163e58ab0b
Fix dnsmasq reboot cron: use /etc/cron.d/ instead of crontab
cproudlock
2026-03-26 15:03:09 -04:00
-
b7cd0974f1
Blancco 7.15.1 upgrade: native kernel boot, BMC cloud licensing
cproudlock
2026-03-26 13:54:25 -04:00
-
76165495ff
Shopfloor PC type system, webapp enhancements, slim Blancco GRUB
cproudlock
2026-03-26 11:25:07 -04:00
-
6d0e6ee284
BIOS check fix, parallel downloads, shopfloor hardening
cproudlock
2026-03-23 11:02:36 -04:00
-
86660a0939
Remove UEFI HTTP Boot config from dnsmasq
cproudlock
2026-02-18 11:58:33 -05:00
-
dd2fec5a41
Blancco PXE boot via Ubuntu kernel switch_root
cproudlock
2026-02-18 11:20:00 -05:00
-
15983854ed
Add git-crypt encrypted MOK signing keys
cproudlock
2026-02-17 12:47:44 -05:00
-
5d5f5ce267
Add git-crypt encryption for MOK signing keys
cproudlock
2026-02-17 12:47:09 -05:00
-
5de807143b
Fix WinPE SMB auth and timeout commands, restore autoinstall disk match
cproudlock
2026-02-16 15:32:39 -05:00
-
a4abd238de
Harden cloud-init disable and rebuild ISO properly in build-usb
cproudlock
2026-02-14 10:53:26 -05:00
-
d3a8e63b36
Fully unattended USB install: patch GRUB and remove cloud-init
cproudlock
2026-02-13 21:05:11 -05:00
-
d482cf4d0c
Skip autoinstall confirmation prompt and disable cloud-init post-install
cproudlock
2026-02-13 20:53:28 -05:00
-
57a53381f2
Ensure Media.tag exists for all images after import and via cron
cproudlock
2026-02-12 16:58:39 -05:00
-
0da52cb083
Auto-reboot after imaging, auto-download pip-wheels in build scripts
cproudlock
2026-02-12 16:56:14 -05:00
-
093a4d713b
Add @reboot to Media.tag refresh cron
cproudlock
2026-02-12 16:41:24 -05:00
-
a7636887b1
Add daily cron to refresh Media.tag (30-day expiry workaround)
cproudlock
2026-02-12 16:41:07 -05:00
-
1a5c4f7124
Eliminate USB requirement for WinPE PXE boot, add image upload script
cproudlock
2026-02-12 16:40:27 -05:00
-
f4c158a5ac
Fix PXE interface detection, add br-pxe bridge to test VM, network upload import
cproudlock
2026-02-11 15:15:14 -05:00
-
7486b9ed66
Apache reverse proxy for webapp, UI improvements
cproudlock
2026-02-10 17:45:10 -05:00