sync: auto-sync from HOWARD-HOME at 2026-06-24 08:45:53

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-24 08:45:53

clients/cascades-tucson/PROJECT_STATE.md

@@ -2,7 +2,7 @@
 
 > READ THIS before starting work on this client.
 > UPDATE THIS when you begin work (claim a lock) and when you finish (release lock + log changes).
-> Last updated: 2026-04-28
+> Last updated: 2026-06-24 (Howard — folded 7 open Syncro tickets into the plan; see Pending / Next Up. NOTE: the rich current-state truth lives in `wiki/clients/cascades-tucson.md`, last compiled 2026-06-23 — this file's lower sections predate the Entra/RF/voice work.)
 
 ---
 
@@ -54,6 +54,20 @@ Senior living community. Active project: HIPAA-compliant folder redirection GPO
 
 ## Pending / Next Up
 
+**Open Syncro Tickets (folded into the engagement, 2026-06-24 — Howard review):**
+These 7 open Cascades tickets are tracked todos #1–#7 and roll up into the existing workstreams
+(machine/user deployment into the domain + network/HIPAA lockdown). All are in Syncro status `New`.
+
+| Ticket | Workstream | Summary | Notes |
+|--------|-----------|---------|-------|
+| #32194 | Workstation deployment | Deploy spare shop machine as temp unit for a new hire | Domain-join + RMM enroll + AD account/OU/SG; target user TBD |
+| #32193 | File svc / HIPAA least-priv | Restricted shared drive for Ashley + Meredith (NTFS-scoped) on CS-SERVER | Confirm Ashley's last name; structure + path with Meredith |
+| #32230 | File svc / permissions | Grant Karen Rossini ALDOCS access on cascadesds (Synology) | Add to correct perm group; confirm reachability |
+| #32254 | Workstation remediation | Chef-PC slow → full Windows reinstall | Back up first; re-join domain + re-enroll RMM |
+| #32370 | Peripheral setup | eFax (Karen & Christin) + portable scanner on both | See `docs/servers/fax-whitelabel.md` + 2026-06-02 efax session log |
+| #32319 | RF / network | WiFi dead spot Room 343 → relocate a floor-2/4 AP | Ties into active RF optimization; unifi-wifi skill, site `va6iba3v` |
+| #32342 | Network | Add a switch in the Copy Room | Confirm uplink/VLAN/PoE; adopt into UniFi if managed |
+
 **Folder Redirection (ongoing):**
 - [ ] EncryptData flag on `\\CS-SERVER\homes` share (HIPAA workitem — currently false)
 - [ ] Second Life Enrichment machine folder redirection end-to-end

clients/cascades-tucson/session-logs/2026-06/2026-06-24-howard-ticket-review-and-cascades-consolidation.md

@@ -0,0 +1,89 @@
+## User
+- **User:** Howard Enos (howard)
+- **Machine:** Howard-Home
+- **Role:** tech
+
+## Session Summary
+
+Reviewed a batch of 31 Syncro tickets one-by-one, cross-referencing each against the repo's
+wiki/session-log history to determine status and surface anything unresolved. Produced a grouped
+findings report: (A) done & invoiced, (B) work-done-but-status-stale, (C) genuinely open needing
+diagnosis, (D) open task tickets with clear scope, (E) flags needing attention. Standout flags:
+ticket #32211 (Jesse Trapp — "opened malicious email, now sending malicious email") was invoiced
+with ZERO documented remediation (likely-compromise, no pw reset / inbox-rule / forwarding audit
+recorded); #31947 Dataforth customer-reply announcing Joel Lohr retirement 3/31 → new contact Dan
+Center; a recurring electrical/UPS theme across unrelated clients (Horseshoe #32256, Rincon Vista
+#32398, High Tech #32179).
+
+Billed ticket #31953 (AT Trebesch — EarthLink address-book / PST contact consolidation). Added 1.0
+hr Remote Business labor ($150, no prepaid block), posted a customer-visible Resolution comment
+describing the multi-day export → consolidate → de-dupe → recover notes/phone/address → re-import
+work, generated invoice #1650785061 ($150.00) with the no-block upsell note, and marked the ticket
+Invoiced. The Syncro record now matches the work; the AT Trebesch wiki still lists #31953 as
+"in progress — awaiting Howard" and should be reconciled on next wiki-compile.
+
+Folded the 7 open Cascades tickets (#32193, #32194, #32230, #32254, #32319, #32342, #32370) into the
+existing Cascades engagement rather than treating them as standalone one-offs — they map onto the
+established workstreams (machine/user deployment into cascades.local + network/HIPAA lockdown).
+Created tracked todos #1–#7 and added an "Open Syncro Tickets" table to the Cascades
+`PROJECT_STATE.md` Pending/Next-Up section, with a note that the rich current-state truth lives in
+the 2026-06-23 wiki compile (PROJECT_STATE's lower sections predate the Entra/RF/voice work).
+
+## Key Decisions
+
+- Reported findings on all 31 tickets first (per Howard) and posted nothing un-asked; visibility of
+  any future "Diagnosis" comments decided per-ticket rather than blanket.
+- #31953 comment posted customer-visible WITH email (it's a resolution the client should see);
+  billed only 1.0 hr despite multi-day effort (Howard's call).
+- The 7 Cascades tickets were wrapped into the master plan (PROJECT_STATE + todos) instead of
+  diagnosed individually, because Howard wants to finish them as part of the broader Cascades
+  build-out (domain machine/user setup + security/HIPAA network lockdown).
+- Treated `wiki/clients/cascades-tucson.md` (2026-06-23) as the authoritative current state;
+  PROJECT_STATE.md (was 2026-04-28) is stale below the new Open-Tickets section.
+
+## Problems Encountered
+
+- None functional. Noted a data-integrity flag (not an error): #32211 invoiced with no remediation
+  documentation — open security exposure to confirm/close separately.
+
+## Configuration Changes
+
+- Created: `clients/cascades-tucson/session-logs/2026-06/2026-06-24-howard-ticket-review-and-cascades-consolidation.md` (this log)
+- Modified: `clients/cascades-tucson/PROJECT_STATE.md` — added "Open Syncro Tickets" table to Pending/Next-Up; updated Last-updated header to point at the 2026-06-23 wiki as current truth.
+- Syncro #31953 (id 105636717): added Resolution comment (420528175), labor line item (42997785), invoice 1650785061, status → Invoiced.
+- Created 7 session todos (#1–#7) for the open Cascades tickets.
+
+## Credentials & Secrets
+
+None discovered or created this session.
+
+## Infrastructure & Servers
+
+- AT Trebesch — Syncro customer 238740; no prepaid block (prepay_hours 0.0); remote rate $150/hr (product 1190473).
+- Cascades — Syncro customer 20149445; CS-SERVER 192.168.2.254 (cascades.local DC/file server); cascadesds Synology 192.168.0.120 (ALDOCS share); UOS site `va6iba3v`.
+
+## Commands & Outputs
+
+- Ticket pull: `GET /tickets?number=<n>` → id, then `GET /tickets/<id>` (strip control chars with `tr -d '\000-\037'`).
+- #31953 billing executed via heredoc `--data-binary @-` per syncro skill: comment → add_line_item (1.0 @ 150) → invoices → PUT note → PUT status Invoiced → post-bot-alert (message_id 1519365754842124439).
+
+## Pending / Incomplete Tasks
+
+- **Cascades open tickets (todos #1–#7)** — execute as part of the engagement:
+  - #32194 deploy spare machine for new hire (target user TBD)
+  - #32193 restricted shared drive Ashley + Meredith (confirm Ashley's last name)
+  - #32230 Karen Rossini ALDOCS access on Synology
+  - #32254 Chef-PC Windows reinstall
+  - #32370 eFax + scanner for Karen & Christin
+  - #32319 WiFi Room 343 (relocate floor-2/4 AP)
+  - #32342 switch in Copy Room
+- **#32211 Jesse Trapp** — confirm whether the malicious-email compromise was actually remediated; if not, run remediation-tool (mailbox rules/forwarding/sign-in audit) + password reset. Open security exposure.
+- **B-group status cleanups:** #31953 wiki reconcile (mark closed); #32380 Sif-oidak (work done by Mike — bill/close); #32229 Mineralogical (close); #31947 Dataforth contact update (Dan Center).
+- **C-group still to diagnose:** #32138 Bruce Thompson (possible infection), #32160 AT Trebesch (assess for threats — pairs with /rmm diagnose on agent ba173f0c), #32202 Arizona Medical Transit (can't access email — verify AMT still active per 2026-06-02 cancellation log).
+- **Broader Cascades plan finish items** (from wiki 2026-06-23): caregiver lockdown Monday go-live (GPO filter swap + CA allow-list to SG-Caregivers), M365 31-user Business Standard→Premium relicense, CS-SERVER degraded RAID-1 replacement, voice 5GHz-lock awaiting Vertical, KPI dashboard scoping.
+
+## Reference Information
+
+- Tickets reviewed: 31767, 31771, 31794, 31849, 31889, 31947, 31953, 32021, 32023, 32030, 32138, 32160, 32179, 32193, 32194, 32202, 32203, 32211, 32229, 32230, 32254, 32256, 32319, 32342, 32370, 32380, 32397, 32398, 32443.
+- #31953 invoice: https://computerguru.syncromsp.com/tickets/105636717 — invoice 1650785061 ($150.00).
+- Cascades plan: `clients/cascades-tucson/PROJECT_STATE.md`; current truth: `wiki/clients/cascades-tucson.md` (compiled 2026-06-23).