# Wolkin Law — Client Files share corrected (again), full data consolidation, VSS, desktop icons

## User
- **User:** Mike Swanson (mike)
- **Machine:** GURU-BEAST-ROG
- **Role:** admin

## Session Summary

Corrected the Wolkin Law `ClientFiles` share to the firm's real repository, consolidated client data scattered across three locations into that one canonical folder, enabled shadow copies on FRONT, and placed desktop shortcuts. All changes dispatched via GuruRMM to agent `front` (Wolkin, Robert — id `877d311a-4b24-462c-97b1-d2a0f7730a71`); a second machine literally named `front` does NOT exist in RMM (the only similar name is `FrontDeskReception`, a different Rednour Law host).

**Share repointed to the actual repository.** The 2026-06-07 session had repointed `\\front\ClientFiles` from `OneDrive\Documents\PRodriquezClients` to `C:\Users\Owner\OneDrive\Documents` — but that was still wrong. The firm's live data is `C:\Shared Data\CLIENT FILES` (413 matter folders + a Closed Files subfolder, actively used, **local** not OneDrive) — exactly what the Mac's original notes recorded and the 06-07 session overrode. Repointed the SMB share `ClientFiles` to `C:\Shared Data\CLIENT FILES`, tightened the share ACL from `Everyone:Full` to `Authenticated Users:Full`, and granted `front\julie` NTFS Modify.

**Desktop icons.** Julie's laptop icon (`\\front\ClientFiles`) self-corrected via the share repoint (no laptop change). Added a `Client Files` icon to the Public Desktop on FRONT (local path `C:\Shared Data\CLIENT FILES`) and on Bob's desktop DESKTOP-V1JT1SE (UNC `\\front\ClientFiles`).

**Shadow copies enabled** on FRONT (Windows 11 Home — used WMI `Win32_ShadowCopy.Create` + a scheduled task, since `vssadmin create shadow` is Server-only). Allocated 90 GB shadowstorage on C: (930 GB / 534 GB free), took a baseline snapshot, and registered scheduled task "ACG VSS Shadow Copy C" running 07:00 + 12:00 daily as SYSTEM. Note: Win11 client does not surface the Explorer "Previous Versions" tab for local volumes — snapshots exist and are restorable admin-side (mount the shadow volume).

**Consolidation (everything into `C:\Shared Data\CLIENT FILES`).** Every move was preceded by a list-only safety check and backstopped by the VSS snapshot + OneDrive cloud recycle bin.
- Deleted stale `OneDrive\Shared Data\Client Files` (178 files) after a robocopy `/L` proved 0 unique/newer (all "Older"). `Client Files` and `CLIENT FILES` there were the same folder (Windows case-insensitive).
- Moved 13 stray closed matters from `OneDrive\Documents` into `CLIENT FILES\Closed Files` (count-verified), dropped 4 empty junk folders (Downloads, New folder, Sound recordings, Zoom). Eskandari merged into a pre-existing closed folder.
- `OneDrive\Documents` held 687 files unique to it + 5 newer (an old-but-not-subset copy). Additively merged (`robocopy /XO /E`, never overwriting a newer canonical file, junk excluded) into the matching matter folders; quarantined 67 loose root files to `CLIENT FILES\Closed Files\_From OneDrive Documents` for Bob to file. The one cloud-only OneDrive placeholder folder ("Prestini, Pino", a reparse point robocopy skips) was verified by relative-path comparison to be 100% present in canonical (74 files, 0 unique) and removed. Post-merge re-diff: 0 unique remaining. `OneDrive\Documents` emptied (folder shell kept so OneDrive's known-folder isn't disrupted).
- Killed defunct sync cruft in both Shared Data roots (no Resilio/ownCloud process running): ownCloud journals/logs (`.csync_journal.db*`, `.owncloudsync.log*`) and Resilio state (`.sync`, `BTS Key - ...`). Preserved real files (`CASE LIST.docx`, `Run Payroll.lnk`, `Scans.lnk`).

## Key Decisions

- **`C:\Shared Data\CLIENT FILES` is the canonical repository**, not any OneDrive path. It is local, active (newest 2026-06-05), and the largest/most complete. The OneDrive copies were stale/partial predecessors from a prior Resilio/ownCloud sync arrangement.
- **Merge, never blind-delete.** `OneDrive\Documents` was NOT a clean duplicate (687 unique files) — deleting it would have lost real matter files. Used additive `/XO` merge so canonical's newer versions are never overwritten and nothing unique is lost.
- **Loose root files quarantined, not dumped into the matter root** — they went to `Closed Files\_From OneDrive Documents` so the clean 413-matter structure stays clean and Bob can file them.
- **Gated Resilio cruft deletion on whether Resilio was running** (it wasn't) to avoid disrupting a live sync.
- **Share name kept "ClientFiles"** so Julie's existing shortcut + the laptop icon resolve unchanged.
- **VSS via WMI on Win11 Home** (not `vssadmin create`, which is Server-only).

## Problems Encountered

- The 06-07 "fix" pointed the share at `OneDrive\Documents`, which was itself wrong — the real folder is the local `C:\Shared Data\CLIENT FILES`. Root cause: the firm's data had been migrated from an OneDrive/Resilio-synced `Shared Data` to a local `C:\Shared Data`, leaving multiple stale copies.
- robocopy does not recurse OneDrive Files-On-Demand reparse-point placeholders, so the "Prestini, Pino" cloud-only folder was skipped by the bulk merge. Verified its 74 stub files against canonical by relative path (all present) before removing it.
- `query user` on FRONT returned empty (no interactive user logged in) — caused a benign non-zero exit on the first recon script; all output was still produced.

## Configuration Changes

GuruRMM-dispatched changes to FRONT (`877d311a-4b24-462c-97b1-d2a0f7730a71`), no repo code changes:
- SMB share `ClientFiles` repointed `C:\Users\Owner\OneDrive\Documents` -> `C:\Shared Data\CLIENT FILES`; share ACL `Everyone:Full` -> `Authenticated Users:Full`; NTFS `front\julie:(OI)(CI)M`.
- VSS: `vssadmin resize shadowstorage /for=C: /on=C: /maxsize=90GB`; baseline `Win32_ShadowCopy.Create('C:\','ClientAccessible')`; scheduled task "ACG VSS Shadow Copy C" (07:00 + 12:00 daily, SYSTEM).
- Public Desktop shortcut `Client Files.lnk` -> `C:\Shared Data\CLIENT FILES`.
- Data consolidation into `C:\Shared Data\CLIENT FILES` (see Summary); deleted stale OneDrive copies + sync cruft.
- DESKTOP-V1JT1SE (`30f6af79-ab19-4ed3-9ebc-71b2bffc2d27`): Public Desktop shortcut `Client Files.lnk` -> `\\front\ClientFiles`.

## Credentials & Secrets

- `front\julie` local account (password recorded in the 2026-06-07 log) — still pending migration to vault `clients/wolkin/`. None created/changed this session.

## Infrastructure & Servers

- FRONT (Wolkin office PC / print server): Windows 11 Home, C: 930 GB / 534 GB free, LAN 192.168.1.153, ZeroTier 10.147.19.199. Canonical repo `C:\Shared Data\CLIENT FILES` (413 matters).
- RSW-Laptop (Julie): `043fd673-35a2-4d3d-8f91-ed73ce70cc1e`. DESKTOP-V1JT1SE (Bob): `30f6af79-ab19-4ed3-9ebc-71b2bffc2d27`.
- ZeroTier network `17d709436c834c9b`. M365 tenant rswolkin.com.

## Commands & Outputs

- Repoint: `Remove-SmbShare ClientFiles` + `New-SmbShare -Name ClientFiles -Path 'C:\Shared Data\CLIENT FILES' -FullAccess 'NT AUTHORITY\Authenticated Users'` + `icacls ... /grant front\julie:(OI)(CI)M`.
- Safety diff: `robocopy <src> <canon> /L /E /FP /NJH /NJS /NDL /NP /NS /XX` — buckets "New File" / "Newer" / "Older".
- Merge: `robocopy <src> <canon> /E /XO /XF desktop.ini Thumbs.db debug.log *.tmp ~* *.rdp *.lnk`.
- VSS: `vssadmin resize shadowstorage`, `Win32_ShadowCopy.Create`, `Register-ScheduledTask`.

## Pending / Incomplete Tasks

- **Bob:** sort the 67 files in `CLIENT FILES\Closed Files\_From OneDrive Documents` into their matters. (Bob has been notified.)
- Migrate `front\julie` password to vault `clients/wolkin/`.
- Update `wiki/clients/wolkin.md` Network section: office LAN is 192.168.1.0/24 (not 172.17.110.x), printer is Sharp MX-B557F @ 192.168.1.158, and the `ClientFiles` share path is now `C:\Shared Data\CLIENT FILES`.
- Consolidate the three Wolkin client slugs (`wolkin` / `wolkin-law` / `rswolkin`) into one canonical slug.

## Reference Information

- Syncro ticket #32369 (Remote Work Access Setup).
- Agents: front `877d311a-4b24-462c-97b1-d2a0f7730a71`; RSW-Laptop `043fd673-35a2-4d3d-8f91-ed73ce70cc1e`; DESKTOP-V1JT1SE `30f6af79-ab19-4ed3-9ebc-71b2bffc2d27`.
- Final canonical state: `CLIENT FILES` = 413 matter folders + 127 root files; `Closed Files` = 113 folders; review subfolder `_From OneDrive Documents` = 67 files.
- VSS baseline ShadowID `{CF539C17-8DFA-43E5-BE6D-4F1C19FAD49E}` (2026-06-08 09:04).
