## User
- **User:** Howard Enos (howard)
- **Machine:** Howard-Home
- **Role:** tech

# The Prairie Schooner — cutover as-built (7/15) + server migration kickoff (7/18)

> Session recovered from the 7/14 prep log. Covers the 7/15 onsite network swap
> results/documentation/ticketing, then (7/18 evening) the start of the QB/file-server
> migration to TPS-SVR. Session PAUSED mid-migration at the "kill QB on old server"
> confirmation gate — see Pending.

## Session Summary

Recovered context from `2026-07-14-howard-network-cutover-prep.md` and resumed. Howard
went onsite 2026-07-15 and completed the NETWORK-ONLY cutover: SonicWall out, UDM Pro in
as gateway (.1). Verified onsite: workstations kept their IPs, internet up, all 3 Yealink
phones registered, QB opened fine against \\tps-server. Workstation fixed IPs were set in
UniFi and the security toggles (Ad Block / DNS Shield / IDS-IPS) confirmed OFF.

Two topology corrections surfaced onsite: (1) the office switch is a UniFi
USW-Lite-16-PoE that now uplinks to the UDM Pro and was adopted into its console (it
PoE-powers the phones); (2) the device previously inventoried as a separate "USG
gateway" at .136 never existed — that device IS the USW-Lite-16-PoE. Only the SonicWall
was removed. Docs corrected (runbook AS-BUILT section + dhcp plan), `--correction`
logged to errorlog.

Updated Syncro ticket #32544 (id 113778439) with a customer-visible cutover comment
(including UDM Pro capability upsell text: Protect NVR, VPN, IDS/IPS, traffic
visibility, cloud management) and set status to In Progress. Bot alert posted.

2026-07-18 evening (staff gone): began the deferred server migration. Created a 7-task
plan mirroring the runbook LATER section. Pre-checks found QBW.exe open ON TPS-SERVER's
console — traced to OUR `guru` admin console session (logged on since 7/7; QBW started
7/14 18:54, i.e. Howard's own cutover-eve verification), plus QBWebConnector running.
Zero workstation SMB file handles on the Quickbooks share. Rebooted all 3 workstations
(Mel-PC, TPS-JAYMI, TPS-Tina) via RMM. Verified server IPs: TPS-SVR correct at .135
(LOM Port 1, DNS .125+loopback); TPS-SERVER at .125/.120 plus an UNEXPLAINED 10.10.10.5/24
secondary and Norton DNS (199.85.126.20) in its resolver list — question to Howard
outstanding (he mentioned moving a cable to "the port the pfSense was on from the Cox
modem"). QB Database Server Manager was installed on TPS-SVR by Howard (scan still
pending). Session saved at the confirmation gate for killing QB on the old server.

## Key Decisions

- 7/15 was executed network-swap-only per plan; server migration decoupled to tonight
  (7/18) with staff gone.
- Machine-side static IPs REJECTED (Howard's question, my recommendation): DHCP renew
  preserves IPs via superset pool; workstation IPs don't functionally matter; statics
  add typo/blame risk. Lock via UniFi fixed-IP reservations instead — Howard did so
  for the PCs.
- The "USG" was never a USG — corrected all docs rather than leaving the stale device
  identity (errorlog `--correction` filed).
- DNS flip (.125-first -> .135-first) clarified as a DHCP-handout-order step, unrelated
  to physical cabling; stays on the list for after QB is proven on the new server.
- Old-server QB DB service is QuickBooksDB34 => client runs QB Desktop 2024 — DBSM on
  TPS-SVR must match 2024, despite the company file being named schoonerQB2025.QBW.

## Problems Encountered

- QBW.exe found running on TPS-SERVER console during pre-migration check — initially
  looked like a staff session; `query user` showed it is the `guru` admin console
  session (since 7/7), QBW started 7/14 18:54 (Howard's own verification). Safe to
  kill; awaiting go.
- TPS-SERVER has an unexpected 10.10.10.5/24 secondary IP + Norton DNS
  (199.85.126.20) in its DNS list — origin unconfirmed, question pending with Howard.
- Bot alert one-liner failed once (`$CLAUDETOOLS_ROOT` unset in fresh shell —
  `/.claude/scripts/post-bot-alert.sh: No such file`); reposted with
  `$(git rev-parse --show-toplevel)`.

## Configuration Changes

- EDITED `clients/prairie-schooner/cutover-runbook.md` — added AS-BUILT 2026-07-15
  section (swap done, USG-was-the-switch correction, new topology chain, toggles OFF).
- EDITED `clients/prairie-schooner/udm-dhcp-plan.md` — as-built note (switch identity
  correction, PC fixed IPs set, switch needs its own fixed IP once noted).
- Syncro #32544: comment 423868403 (customer-visible, cutover summary), status ->
  In Progress.
- RMM: rebooted Mel-PC, TPS-JAYMI, TPS-Tina (cmds 311b17d9/f664f1f0/8af9ffd6).
- `errorlog.md`: `--correction` (assumed separate USG existed; it was the
  USW-Lite-16-PoE).
- No changes made yet to TPS-SERVER/TPS-SVR beyond read-only checks.

## Credentials & Secrets

- None new. `guru` domain-admin console session active on TPS-SERVER since 7/7.
  Howard has user logon passwords for workstation QB testing.

## Infrastructure & Servers

- Topology (as-built): Cox modem -> UDM Pro (gw 192.168.1.1, DHCP .100-.199, DHCP DNS
  .125,.135) -> USW-Lite-16-PoE (adopted; PoE for 3x Yealink) -> endpoints.
- TPS-SERVER (old DC/QB host, 2016): .125 + .120 + UNEXPLAINED 10.10.10.5/24 on
  Ethernet; DNS incl. 127.0.0.1 + 199.85.126.20 (Norton). RMM
  4f8dff0c-b033-4f66-9101-9350e32e0a81. QB stack: QBCFMonitorService 3036,
  QBDBMgrN 4300, QBW 8652 (since 7/14 18:54), QBWebConnector 11416; services
  QuickBooksDB34 Running (QB 2024), DB27/28/31 Disabled.
- TPS-SVR (new DC, 2019): .135 on "Embedded LOM 1 Port 1", DNS .125+127.0.0.1; other
  3 LOM ports unplugged (169.254.x). RMM 799675cf-5c94-465a-b653-63e08d016526.
  QB DBSM installed by Howard 7/18 (scan pending). Staged data C:\Share\Quickbooks
  (144.2 GB) + C:\Share\Deployment (22.4 GB) from 7/14; shares exist.
- Workstations (all rebooted 7/18): Mel-PC eb2f2aeb-f56e-4fc6-8e5a-73257b95e5f0,
  TPS-JAYMI 1fbf4e45-1b48-4c82-af85-847fc1344e12, TPS-Tina
  c8d76770-dc9e-45b7-94c7-fdcab3e105a2. (Resolve live before dispatch.)
- All 5 Schooner agents online in GuruRMM as of this session.

## Commands & Outputs

- RMM auth: `eval "$(bash .claude/scripts/rmm-auth.sh 2>/dev/null)"`.
- QB pre-check on TPS-SERVER (cmd 78963177): Get-SmbOpenFile *quickbooks* -> only
  TINA holding the DIRECTORY handle C:\Share\Quickbooks\ (no file locks); recheck
  post-reboot -> zero handles; `query user` -> guru console session Active since 7/7.
- Server IP checks (cmds 181ab92a / f51ad3cf): outputs recorded above.
- Reboot dispatch: `shutdown /r /t 20` via powershell command_type.
- Robocopy delta (NEXT, run on TPS-SVR): source \\tps-server\Quickbooks +
  \\tps-server\Deployment -> C:\Share\*, `/E /COPYALL /DCOPY:DAT /R:1 /W:1 /MT:16`,
  expect FAILED=0.

## Pending / Incomplete Tasks

PAUSED at confirmation gate. Remaining plan (task list in-session):
1. [in progress] Kill QBW.exe (8652) + QBWebConnector (11416), stop QBCFMonitorService
   on TPS-SERVER; re-verify zero handles. (Awaiting Howard's "go" — QBW is his own
   7/14 session, safe.)
2. Delta robocopy refresh to TPS-SVR (Quickbooks + Deployment), FAILED=0 gate.
3. Verify shares on TPS-SVR (exist from staging; check perms per runbook).
4. QB DBSM scan of C:\Share\Quickbooks on TPS-SVR (DBSM installed; verify it is 2024
   to match QuickBooksDB34).
5. GPMC: repoint GPP Q: drive map -> \\tps-svr\Quickbooks (Default Domain Policy,
   Drives.xml, currently \\tps-server\quickbooks).
6. Workstation relogon + QB multi-user test (Howard has passwords).
7. DNS flip .135-first on UDM Pro AFTER QB proven + update Syncro #32544 with evening
   results (customer promised an update "tonight").
Open question: origin/purpose of 10.10.10.5/24 on TPS-SERVER + which cable Howard
moved ("pfSense port from Cox modem" remark). Also still open: pin phone/NVR/switch
fixed IPs in UniFi; NVR remote view check; AD retirement (FSMO/CA/demote) is a later
visit.

## Reference Information

- Runbook: `clients/prairie-schooner/cutover-runbook.md` (AS-BUILT + LATER sections).
- Plan: `clients/prairie-schooner/udm-dhcp-plan.md`. Verify script:
  `clients/prairie-schooner/verify-cutover.sh` (not yet run — superseded by manual
  onsite verification 7/15).
- Syncro ticket #32544 = id 113778439,
  https://computerguru.syncromsp.com/tickets/113778439 (comment 423868403).
- Prior logs: `2026-07-14-howard-network-cutover-prep.md`,
  `2026-07-14-howard-sonicwall-usg-to-udmpro-swap-prep.md`,
  `2026-07-10-howard-server-migration.md`.
- Wiki: `wiki/clients/the-prairie-schooner.md` (needs recompile after migration).
- Company file: schoonerQB2025.QBW (2.9 GB) — QB Desktop year 2024 (QuickBooksDB34).
