diff --git a/plugins/geenforce/seed_display_scope.py b/plugins/geenforce/seed_display_scope.py
index 81ad7d9..a0f408a 100644
--- a/plugins/geenforce/seed_display_scope.py
+++ b/plugins/geenforce/seed_display_scope.py
@@ -111,28 +111,48 @@ try {{
     if ($shopdbConfig.BaseUrl) {{ $KioskBaseUrl = ([string]$shopdbConfig.BaseUrl).TrimEnd('/') }}
 }} catch {{}}
 
-$displayTypeFile = 'C:\\Enrollment\\display-type.txt'
-if (-not (Test-Path -LiteralPath $displayTypeFile)) {{
-    Write-Host "display-type.txt not found at $displayTypeFile; nothing to configure."
+# PREFERRED: resolve this display's role from the server by its FQDN, so a change
+# in Settings > Dashboard Defaults takes effect with no reimage / local edit. The
+# FQDN is F<BIOS serial>.<domain> (GE device naming); domain from HKLM
+# DisplayFqdnDomain or the default. display-role is a PUBLIC endpoint (no token).
+$path = $null
+$serial = ''
+try {{ $serial = ([string](Get-CimInstance -ClassName Win32_BIOS -ErrorAction Stop).SerialNumber).Trim() }} catch {{}}
+$fqdnDomain = 'device.geaerospace.net'
+try {{
+    $ddom = Get-ItemProperty -Path 'HKLM:\\SOFTWARE\\GE\\ShopDB' -Name DisplayFqdnDomain -ErrorAction Stop
+    if ($ddom.DisplayFqdnDomain) {{ $fqdnDomain = ([string]$ddom.DisplayFqdnDomain).Trim().Trim('.') }}
+}} catch {{}}
+if ($serial) {{
+    $fqdn = ('F' + $serial + '.' + $fqdnDomain).ToLower()
+    try {{
+        [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
+        $roleUri = "$KioskBaseUrl/api/dashboarddefaults/display-role?fqdn=$([uri]::EscapeDataString($fqdn))"
+        $resp = Invoke-RestMethod -Uri $roleUri -TimeoutSec 20 -ErrorAction Stop
+        if ($resp -and $resp.data -and $resp.data.path) {{
+            $path = [string]$resp.data.path
+            Write-Host "server role for $fqdn -> $path"
+        }}
+    }} catch {{ Write-Host "display-role lookup failed for $fqdn : $($_.Exception.Message)" }}
+}}
+
+# FALLBACK: the local display-type.txt map (offline, or no server mapping yet).
+if (-not $path) {{
+    $displayTypeFile = 'C:\\Enrollment\\display-type.txt'
+    if (Test-Path -LiteralPath $displayTypeFile) {{
+        $displayType = (Get-Content -LiteralPath $displayTypeFile -Raw).Trim()
+        if (-not [string]::IsNullOrWhiteSpace($displayType)) {{
+            $matchedKey = $DisplayTypeTargets.Keys | Where-Object {{ $_ -ieq $displayType }} | Select-Object -First 1
+            if ($matchedKey) {{ $path = [string]$DisplayTypeTargets[$matchedKey]; Write-Host "local display-type '$displayType' -> $path" }}
+        }}
+    }}
+}}
+if (-not $path) {{
+    Write-Host 'No display role from server or display-type.txt; nothing to configure.'
     return
 }}
 
-$displayType = (Get-Content -LiteralPath $displayTypeFile -Raw).Trim()
-if ([string]::IsNullOrWhiteSpace($displayType)) {{
-    Write-Host 'display-type.txt is empty; nothing to configure.'
-    return
-}}
-
-# Case-insensitive lookup so 'lobby' and 'Lobby' both resolve.
-$matchedKey = $DisplayTypeTargets.Keys |
-    Where-Object {{ $_ -ieq $displayType }} |
-    Select-Object -First 1
-if (-not $matchedKey) {{
-    Write-Host "Unknown display-type '$displayType'; known types: $($DisplayTypeTargets.Keys -join ', ')."
-    return
-}}
-
-$kioskUrl = "$KioskBaseUrl$($DisplayTypeTargets[$matchedKey])"
+$kioskUrl = "$KioskBaseUrl$path"
 
 # Resolve msedge.exe (baked into the display image).
 $edge = $null