I've found this: Changing UEFI boot order from Windows dealing with the UEFI boot order from Windows.
How do I figure out which UUID is which boot device?
Running bootmgr /enum {fwbootmgr} I get the following output on two different machines which are exactly the same brand/type/model:
displayorder {bdb82af6-097d-11f0-8df2-806e6f6e6963}
{bootmgr}
{bdb82af1-097d-11f0-8df2-806e6f6e6963}
{bdb82af2-097d-11f0-8df2-806e6f6e6963}
{bdb82af3-097d-11f0-8df2-806e6f6e6963}
{bdb82af4-097d-11f0-8df2-806e6f6e6963}
{bdb82af5-097d-11f0-8df2-806e6f6e6963}
{bdb82af7-097d-11f0-8df2-806e6f6e6963}
{bdb82af8-097d-11f0-8df2-806e6f6e6963}
{bdb82aeb-097d-11f0-8df2-806e6f6e6963}
{bdb82aec-097d-11f0-8df2-806e6f6e6963}
displayorder {bootmgr}
{37446058-08cd-11f0-8df2-806e6f6e6963}
{37446053-08cd-11f0-8df2-806e6f6e6963}
{37446054-08cd-11f0-8df2-806e6f6e6963}
{37446055-08cd-11f0-8df2-806e6f6e6963}
{37446056-08cd-11f0-8df2-806e6f6e6963}
{37446057-08cd-11f0-8df2-806e6f6e6963}
{37446059-08cd-11f0-8df2-806e6f6e6963}
{3744605a-08cd-11f0-8df2-806e6f6e6963}
{3744604d-08cd-11f0-8df2-806e6f6e6963}
{3744604e-08cd-11f0-8df2-806e6f6e6963}
The upper one is set to boot from network (Realtek USB LAN UEFI IPv4 or something it's called on those machines, it's the LAN device of a Thunderbolt dock); the lower one is booting local Windows first. As I mentioned, they're two machines which are otherwise identical (make/model/type - Lenovo P16v Gen1 / 21FC).
How do I figure out - bar trial and error, which is out of the question, this needs to be a script that can be rolled out to new machines - which UUID entry is the one I want for e.g. IPv4 network booting?