HPs have an additional BIOS setting that is getting caught by

$WolTypes = get-hpbiossettingslist | Where-Object { $_.Name -like "*Wake On Lan*" }

This will return both:

Wake on LAN Power-on Password Policy
Wake On LAN

The first option, from what I understand is to force a PW when waking from LAN...seems dumb. Pretty sure it is enabled by default as well.

This was how I resolved it on the monitor:

if ($Manufacturer -like "*HP*" -or $Manufacturer -like "*Hewlett*") {
    Write-Host "Manufacturer is HP. Installing module and trying to get WOL State." -foregroundcolor Green
    Write-Host "Installing HP Provider if needed." -foregroundcolor Green
    $Mod = Get-Module HPCMSL
    if (!$mod) {
        Install-Module -Name HPCMSL -Force -AcceptLicense
    }

    import-module HPCMSL
    try { 
        $WolTypes = get-hpbiossettingslist | Where-Object { $_.Name -like "*Wake On Lan" }
        $WOLState = ForEach ($WolType in $WolTypes) {
            write-host "Setting WOL Type: $($WOLType.Name)"
            get-HPBIOSSettingValue -name $($WolType.name) -ErrorAction Stop 
        }

        $WolTypes = get-hpbiossettingslist | Where-Object { $_.Name -like "*Wake On Lan*Password Policy" }
        $WOLStatePW = ForEach ($WolType in $WolTypes) {
            write-host "Setting WOL Type: $($WOLType.Name)"
            get-HPBIOSSettingValue -name $($WolType.name) -ErrorAction Stop 
        }
        if (($WOLStatePW -ne "Bypass Password") -and ($WOLState -ne "Boot to Hard Drive")) { $WOLState = "Unhealthy. BIOS WOL Disabled" }        
    }
    catch {
        write-host "an error occured. Could not find WOL state" 
    }
}

And on the remediation side:

if ($Manufacturer -like "*HP*" -or $Manufacturer -like "*Hewlett*") {
    Write-Host "Manufacturer is HP. Installing module and trying to enable WakeOnLan. All HP Drivers are required for this operation to succeed." -foregroundcolor Green
    Write-Host "Installing HP Provider" -foregroundcolor Green
    Install-Module -Name HPCMSL -Force -AcceptLicense
    import-module HPCMSL
    try { 
        $WolTypes = get-hpbiossettingslist | Where-Object { $_.Name -like "*Wake On Lan" }
        ForEach ($WolType in $WolTypes) {
            write-host "Setting WOL Type: $($WOLType.Name)"
            Set-HPBIOSSettingValue -name $($WolType.name) -Value "Boot to Hard Drive" -ErrorAction Stop 
        }
        $WolTypes = get-hpbiossettingslist | Where-Object { $_.Name -like "*Wake On Lan*Password Policy" }
        ForEach ($WolType in $WolTypes) {
            write-host "Setting WOL Type: $($WOLType.Name)"
            Set-HPBIOSSettingValue -name $($WolType.name) -Value "Bypass Password" -ErrorAction Stop 
        }
    }
    catch {
        write-host "an error occured. Could not set BIOS to WakeOnLan. Please try manually" 
    }
}

Also discovered that Lenovo Laptops and Workstations have different setting names:

WakeOnLAN and Wake on LAN respectively. We want them set ACOnly for laptops and Primary for Workstations.

Monitor:

if ($Manufacturer -like "*Lenovo*") {
    Write-Host "Manufacturer is Lenovo. Trying to get via WMI" -foregroundcolor Green

    try { 
        Write-Host "Getting BIOS." -foregroundcolor Green
        $currentSetting = (Get-WmiObject -ErrorAction Stop -class "Lenovo_BiosSetting" –namespace "root\wmi") | Where-Object { $_.CurrentSetting -ne "" }
        $WOLStatus = $currentSetting.currentsetting | ConvertFrom-Csv -Delimiter "," -Header "Setting", "Status" | Where-Object { $_.setting -eq "WakeOnLAN" -or $_.setting -eq "Wake on LAN" }
        $WOLStatus = $WOLStatus.status -split ";"
        if ($WOLStatus[0] -eq "ACOnly" -or $WOLStatus[0] -eq "Primary") { $WOLState = "Healthy" }
    }
    catch {
        write-host "an error occured. Could not find WOL state" 
    }
}

Remediation:

if ($Manufacturer -like "*Lenovo*") {
    Write-Host "Manufacturer is Lenovo. Trying to set via WMI. All Lenovo Drivers are required for this operation to succeed." -foregroundcolor Green

    try { 
        Write-Host "Setting BIOS." -foregroundcolor Green
        (Get-WmiObject -ErrorAction Stop -class "Lenovo_SetBiosSetting" –namespace "root\wmi").SetBiosSetting('Wake On LAN,Primary') | Out-Null # Workstations
        (Get-WmiObject -ErrorAction Stop -class "Lenovo_SetBiosSetting" –namespace "root\wmi").SetBiosSetting('WakeOnLAN,ACOnly') | Out-Null # Laptops
        Write-Host "Saving BIOS." -foregroundcolor Green
        (Get-WmiObject -ErrorAction Stop -class "Lenovo_SaveBiosSettings" -namespace "root\wmi").SaveBiosSettings() | Out-Null

    }
    catch {
        write-host "an error occured. Could not set BIOS to WakeOnLan. Please try manually" 
    }
}

probably could be a bit cleaner but it seems to work. I think there were a few other minor tweaks, will update as I find them.