azcomputerguru/claudetools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-06-29 14:23:40

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-29 14:23:40
This commit is contained in:
Howard Enos
2026-06-29 14:24:12 -07:00
parent 602c5e5bd6
commit 00af39d369
12 changed files with 2873 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

143
wiki/clients/michaeljohnson.md Normal file
View File

@@ -0,0 +1,143 @@
---
type: client
name: michaeljohnson
display_name: Michael Johnson (Law Office)
last_compiled: 2026-06-29
compiled_by: HOWARD-HOME/claude-main
sources:
- clients/michaeljohnson/onboarding-baselines/DESKTOP-GG4LKSL-20260629T211835.md
- clients/michaeljohnson/onboarding-baselines/MJ-PARALEGAL-20260629T211845.md
- Syncro customer 152567 (ticket history + contact record)
- GuruRMM onboarding 2026-06-29 (client + site "Main", BRIGHT-RIVER-8998)
---
# Michael Johnson (Law Office)
## Profile
- **Business type:** Solo legal practice (Tucson, AZ) — *inferred* from the paralegal
workstation, WordPerfect + "Seabill" legal-billing software, and the recurring
shared-file / Outlook-calendar-sync work between Michael's and Crystal's machines.
Not formally stated in Syncro (no `business_name` on the record).
- **Syncro Customer ID:** 152567 (customer record created 2013-12-04 — long-standing client)
- **Billing model:** Break-fix / time-and-materials. **No prepaid block** (`prepay_hours = 0.0`,
live 2026-06-29). History is overwhelmingly emergency / onsite / remote one-off tickets.
- **Address:** 177 N Church, Tucson, AZ 85701
- **GuruRMM onboarded:** 2026-06-29 (Howard) — client + site "Main"; both workstations enrolled same day.
- **Onboarding grade:** DESKTOP-GG4LKSL = **AMBER**; MJ-PARALEGAL = **RED**.
## Contacts
| Name | Role | Email / Phone | Notes |
|---|---|---|---|
| Michael Johnson | Owner / attorney | michaeljohnson311@gmail.com / 520-622-0065 | Primary Syncro contact; uses DESKTOP-GG4LKSL |
| Crystal (Krystal) | Paralegal / assistant | (no email on file) / 520-906-4672 | Uses MJ-PARALEGAL; most day-to-day tickets are hers |
Email is on **Gmail / Google Workspace** (consumer/Workspace — not M365). Several past tickets
involve Google account storage/payment and Outlook talking to the Google calendar; mail is **not**
hosted or managed by ACG M365 tooling.
## Infrastructure
### Network
- **Topology:** Workgroup, peer-to-peer (no on-prem AD, no domain join). Both machines report
`PartOfDomain=False` / `Domain=WORKGROUP`.
- **LAN subnet:** 192.168.1.0/24.
- Shared files are served peer-to-peer between the two workstations (consistent with the long
history of "can't access shared files" tickets) — exact share host/path **not yet mapped**.
### Workstations (GuruRMM enrolled 2026-06-29, site "Main")
| Hostname | User | Model | CPU | RAM | OS | IP | Agent ID | Grade |
|---|---|---|---|---|---|---|---|---|
| DESKTOP-GG4LKSL | Michael | HP Pavilion Gaming TG01-2xxx | i7-11700F 8c/16t | 31.8 GB | Win 11 Pro 25H2 (build 26200) | 192.168.1.135 (Wi-Fi) | 09c08484-2b51-404b-a294-6e39f498867c | AMBER |
| MJ-PARALEGAL | Crystal | ASUS (desktop, generic board) | i5-10400 6c/12t | 15.8 GB | Win 11 Pro 25H2 (build 26200) | 192.168.1.136 (wired) | 4537ac34-e548-484c-b4e9-fd91e7f97a23 | RED |
Both on Win 11 25H2 (supported until 2027-10-12), OS activated, agent v0.6.75, Defender active &
current with Tamper Protection on, SMBv1 disabled, LAPS reg key present. Neither has a backup agent.
MJ-PARALEGAL was recently recovered + upgraded to Win11 (Syncro #31768).
### RMM site / enrollment
- **Client:** Michael Johnson · **Site:** Main · **Site code:** `BRIGHT-RIVER-8998`
- **Client ID:** `99022a2e-6b8f-472b-9269-6a746ef0970b` · **Site ID:** `94b5cb21-3d8e-484a-8ef3-8388b66417d2`
- **Install page:** https://rmm.azcomputerguru.com/install/BRIGHT-RIVER-8998
- **Enrollment key vault path:** `clients/michaeljohnson/gururmm-site-main.sops.yaml` (also stamped `syncro_customer_id: 152567`)
## Onboarding Findings (2026-06-29 baselines)
### MJ-PARALEGAL — RED (2 critical / 4 warning)
- **[CRITICAL] Firewall OFF on Private + Public profiles** (`Domain=True` only). Exposed to inbound /
lateral attacks on the local network. Re-enable all profiles.
- **[CRITICAL] E: drive 0% free** (0 GB of 255.6 GB). Risk of failed updates, crashes, corruption.
Find what is filling it (likely data / scanned docs) and clean up or expand urgently.
- [WARNING] BitLocker off on C: · 2 pending Windows updates · 1 unexpected shutdown in last 14 days ·
6 auto-start services stopped (Asus/Lenovo/Google updaters + Intel TPM provisioning — mostly benign,
but note Lenovo *and* Asus services on the same box suggests image/hardware churn).
- DNS server set to **172.16.132.1** on a 192.168.1.x LAN — anomalous (looks like a stale/foreign
resolver, possibly a leftover VPN/management DNS). Verify and correct to the local gateway/ISP DNS.
- Local admins: `Administrator`, `localadmin`, `Paralegal`.
### DESKTOP-GG4LKSL — AMBER (0 critical / 5 warning)
- [WARNING] BitLocker off on C: · 4 pending Windows updates · D: 14.6% free (68.1 GB of 465.8 GB) ·
1 unexpected shutdown in last 14 days · 3 auto-start services stopped (Google updaters + Intel TPM).
- Note: C: is the large/healthy volume (690 GB free of 930 GB); **D: is the low one** — confirm which
volume holds working data before cleanup.
- Windows Time source is **time1.aliyun.com** (Alibaba NTP) — unusual; reset to a standard pool
(`time.windows.com` / `pool.ntp.org`).
- Local admins: `Administrator`, `Localadmin`, `owner`.
### Common to both
- No BitLocker (workgroup, no escrow target — would need manual key storage / vault).
- No backup agent on either machine — **no backup coverage confirmed.** For a law office this is the
biggest gap; confirm whether anything (cloud sync, manual) protects the working files.
- Defender-only AV, firewall (GG4LKSL all-on / PARALEGAL needs fixing), SMBv1 off — baseline security
otherwise reasonable.
- ACG remote tooling present and expected: ScreenConnect on both; Splashtop + Syncro agent additionally
on MJ-PARALEGAL. No competitor/foreign RMM agents detected.
## Syncro
- **Customer:** Michael Johnson, id `152567` (since 2013-12-04). Break-fix, no prepaid block.
- **Open ticket:** #32477 — *Onsite - Check machine connections and printers.* (New)
- **Recent relevant:** #31768 *Recovered Paralegal Machine and Win11 Upgrade* (Invoiced) — origin of the
current MJ-PARALEGAL build; #32329 *Calendar issues* (Resolved).
- **Recurring ticket themes** across ~50 tickets: printer setup/offline errors, Outlook<->Google
calendar sync between Michael & Crystal, "can't access shared files", mice failing after power
outages, WordPerfect/Seabill hangs, new-machine builds.
## Patterns & Known Issues
- **Two-person peer-to-peer office.** Everything is workgroup + shared files between Michael's and
Crystal's PCs. Shared-file and calendar-sync breakage is the single most common call — there is no
server, so a machine being down/offline breaks the other's access.
- **Mail is Google, not M365.** Do not reach for the ComputerGuru M365 remediation suite here — Outlook
is configured against a Google account. Google storage/billing has caused outages historically.
- **Power-outage sensitivity.** Multiple "mouse/peripheral dead after a power outage" and
"machines went down" tickets — no UPS protection documented; a UPS on each machine would cut repeat
emergency calls.
- **Backups unverified.** No backup agent on either workstation. For a legal practice's working files
this is the top risk to close.
- **MJ-PARALEGAL E: full + firewall off** are the two immediate must-fix items from onboarding.
## Active Work / Open Items
| Priority | Action | Owner | Notes |
|---|---|---|---|
| P1 | Re-enable firewall (Private + Public) on MJ-PARALEGAL | Howard | CRITICAL onboarding finding |
| P1 | Clear/expand E: on MJ-PARALEGAL (0% free) | Howard | CRITICAL; identify what's filling 255 GB |
| P1 | Establish/confirm backup coverage for both PCs | Howard/Mike | No backup agent on either; law-office data |
| P2 | Fix anomalous DNS (172.16.132.1) on MJ-PARALEGAL | Howard | Should be local gateway / ISP DNS |
| P2 | Onsite #32477 — check machine connections + printers | Howard | Open Syncro ticket |
| P2 | Install pending Windows updates (4 on GG4LKSL, 2 on PARALEGAL) | Howard | Next maintenance window |
| P3 | Free space on GG4LKSL D: (14.6%) | Howard | Confirm which volume holds data first |
| P3 | Reset GG4LKSL time source off Alibaba NTP | Howard | Use standard NTP pool |
| P3 | Evaluate UPS for both machines | Mike | Repeat post-outage peripheral failures |
| P3 | Consider BitLocker (with key escrow) | Howard | Both unencrypted; workgroup needs manual key storage |
## Backlinks
- [[projects/gururmm]] — DESKTOP-GG4LKSL + MJ-PARALEGAL enrolled (site: Main / BRIGHT-RIVER-8998)

58
wiki/clients/rednour.md
View File

@@ -2,13 +2,14 @@
type: client
name: rednour
display_name: Rednour Law Offices
last_compiled: 2026-06-02
compiled_by: DESKTOP-0O8A1RL/claude-main
last_compiled: 2026-06-29
compiled_by: HOWARD-HOME/claude-main
sources:
- clients/rednour/reports/2026-05-31-onboard-and-rename-emma-to-carla.md
- clients/rednour/reports/2026-06-01-carla-password-set.md
- clients/rednour/reports/2026-06-02-carrie-emma-display-name-stale-pin.md
- clients/rednour/session-logs/2026-06-02-session.md
- clients/rednour/session-logs/2026-06/2026-06-29-howard-legalasst-zip-hang-wp5-win11.md
- session-logs/2026-05-31-mike-rednour-and-claudetools-infra.md
- clients/rednour/onboarding-baselines/FRONTDESKRECEPT-20260529T195614.md
- clients/rednour/onboarding-baselines/LEGALASST-20260529T200647.md
@@ -183,6 +184,44 @@ Created a dedicated standard local account **`nick`** on REDNOURCARRIEVI (Passwo
Operational note: PowerShell `Set-Acl` ACL propagation down Carrie's large Documents tree exceeded the RMM command timeout (twice), and since stdout is dropped on timeout a randomly-generated password was lost each time — generate passwords locally so they survive a timeout (logged to errorlog).
### 2026-06-29 — LEGALASST (legal assistant / "Emma") explorer hang on .zip + WordPerfect 5 save error; Win11 upgrade planned
**Operator: Howard Enos** (reported via Carrie). The legal assistant's workstation
**LEGALASST** (Carla Skinner's box; active local account `emma`, profile `C:\Users\Ale`,
OneDrive `carla@rednourlaw.com`) repeatedly hung explorer when opening files. Diagnosed live
over GuruRMM (agent `18825ea7-df58-47bb-b492-822cb16fb5ec`).
- **explorer HANGS, not crashes** — AppHang Event 1002 (no Event 1000 / faulting module);
~10 in 3h on 2026-06-29, continuing after a 10:52 reboot.
- **Root cause: the built-in Windows Compressed Folders handler** (explorer's zip-as-folder
namespace). Symptom narrowed to **opening `.zip` only** (Word/PDF/folders fine), and the
failing zip is **local (desktop)** — not OneDrive, not a network share. `zipfldr.dll` is
intact + validly signed, so the hang is environmental, not a corrupt handler DLL.
- **Ruled out:** Adobe shell extensions (blocked/tested via the Microsoft `Shell Extensions\
Blocked` list, no change, reverted); AMD Vega driver (only non-MS DLLs in explorer, but
zero TDR events); OneDrive (overlay not even loaded, sync healthy); remapped drives X/Y/Z →
`\\rednourcarrievirt` (Status OK, SMB healthy); `.NET Runtime 1022` "profiling API attach"
(201 events but no `COR_PROFILER` set — benign noise).
- **SFC** (run by Howard) found and repaired corruption (0 unrepairable) — repair pending a
reboot to load.
- **Workaround:** Howard installed **7-Zip 26.02** (`C:\Program Files\7-Zip\7zFM.exe`); it
opens the zips fine (bypasses explorer's zip namespace). Howard to set 7-Zip as default for
`.zip` (and `.7z`/`.rar`, currently unassociated). `.zip` had no UserChoice; 7-Zip only
registered a `7-Zip.iso` ProgId on install.
- **Second issue (same machine): WordPerfect 5 "not enough free space" on save** regardless
of save location, despite Howard verifying ample free space. Leading hypothesis: legacy/
DOS-era WordPerfect free-space miscalculation on large-capacity volumes (free-space value
overflows → false "disk full"). App-level; **the OS upgrade will not fix it**. Mitigate via
DOSBox or a SUBST'd small-capacity save target. Exact WP version/edition (DOS 5.1 vs
Windows) to be confirmed.
- **Plan: upgrade LEGALASST to Windows 11** — expected to resolve the zip-handler hang by
rebuilding the shell/system files (also applies the SFC repair). Verify by opening a local
`.zip` with the *built-in* handler post-upgrade. If the hang persists, next lead is Defender
archive-scan + cloud (MAPS) lookup stalling the shell.
All diagnostic changes were reverted (Adobe/7-Zip Blocked-list test entries removed; an
orphaned RMM diagnostic process killed) — the box was left clean.
## Patterns & Known Issues
- **EWS required for personal contact work.** No app in the ComputerGuru suite holds `Contacts.Read` or `Contacts.ReadWrite` on Graph. Personal contact folder reads and modifications must go through EWS (`full_access_as_app` on the Exchange Operator SP with `ExchangeImpersonation`).
@@ -194,6 +233,18 @@ Operational note: PowerShell `Set-Acl` ACL propagation down Carrie's large Docum
- **macOS RMM agent won't run on Apple Silicon if unsigned.** The site-code installer serves an unsigned aarch64 binary; Apple Silicon SIGKILLs unsigned Mach-O. Until the server publishes a signed/notarized build (`build-macos-signed.sh`), Apple Silicon Mac enrollment fails (blocks Nick's Mac; same root issue likely affects Scileppi's Mac).
- **LEGALASST and REDNOURCARRIEVI are on Win 10 22H2 (EOL).** No security updates since 2025-10-14. Plan OS upgrade to Win 11 or Win 10 newer build.
- **REDNOURCARRIEVI: Defender was off at onboarding.** Confirm it has been re-enabled; it is a critical finding.
- **LEGALASST: built-in Compressed Folders handler hangs explorer on `.zip` open.** Local zips;
Word/PDF fine. `zipfldr.dll` intact (environmental, not a corrupt DLL). AppHang Event 1002,
no faulting module. Workaround = 7-Zip as default for `.zip`. Win11 upgrade planned to
resolve. If it persists post-upgrade, suspect Defender archive-scan + cloud (MAPS) lookup
stalling the shell. To test-disable any shell extension reversibly, add its CLSID to
`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked` (delete to restore).
- **LEGALASST: WordPerfect 5 "not enough free space" on save** despite verified free space and
regardless of save location. Likely legacy free-space overflow on large-capacity volumes;
**OS upgrade will not fix it**; mitigate via DOSBox / SUBST small-capacity drive. Confirm WP
version/edition.
- **`.NET Runtime 1022` "profiling API attach" errors are noise** unless a `COR_PROFILER` env
var is actually set — do not chase them as a hang cause.
## Active Work / Open Items
@@ -202,6 +253,9 @@ Operational note: PowerShell `Set-Acl` ACL propagation down Carrie's large Docum
| P1 | Re-enable Defender on REDNOURCARRIEVI | Howard/Mike | Was off at onboarding 2026-05-29; confirm current state |
| P1 | Remove prior MSP agents (ScreenConnect, Splashtop, Syncro, Datto RMM) | Mike/Howard | Present on all 3 machines; Datto RMM on REDNOURCARRIEVI only |
| P1 | Upgrade LEGALASST and REDNOURCARRIEVI to a supported OS | Mike | Both on Win 10 22H2 (EOL 2025-10-14) |
| P1 | Upgrade LEGALASST to Windows 11 | Mike/Howard | 2026-06-29: expected to resolve the explorer-on-.zip hang (rebuilds shell/system files) + applies pending SFC repair. Pre-reqs: enable fTPM + Secure Boot (Ryzen 3 3200G is Win11-supported), bump RAM from 5.9 GB, remove leftover Syncro agent. Test a local `.zip` with the built-in handler post-upgrade |
| P2 | LEGALASST: WordPerfect 5 "not enough free space" on save | Howard | 2026-06-29: error on save regardless of location; ample free space verified. Likely legacy free-space overflow on large volume; OS upgrade will NOT fix. Mitigate via DOSBox / SUBST small-capacity drive; confirm WP version/edition |
| INTERIM | LEGALASST: set 7-Zip as default for `.zip`/`.7z`/`.rar` | Howard | 2026-06-29: 7-Zip 26.02 installed as workaround for the built-in zip-handler hang; set defaults via 7-Zip GUI (Tools -> Options -> System) |
| DONE | Shared-drive access for Nick Pafford | Howard | 2026-06-25: created local `nick` account on REDNOURCARRIEVI; `Documents` share = Change + NTFS = Modify; cred vaulted `clients/rednour/nick-smb-rednourcarrievi.sops.yaml`; Nick's Apple Silicon Mac mounts `smb://192.168.10.194/Documents` |
| P1 | Fix GuruRMM macOS agent install on Nick's Apple Silicon Mac | Howard/Mike | 2026-06-25 install failed. Likely cause: served aarch64 binary is **unsigned** -> Apple Silicon SIGKILLs it. Fix: serve the signed+notarized binary (`agent/build-macos-signed.sh`, Mike's Developer ID) or ad-hoc `codesign -s -` in the installer. Confirm with Mac log (`killed: 9`). Deferred (limited ScreenConnect session only) |
| P2 | Return visit: phone + printer setup at Rednour | Howard | 2026-06-25: pending; may require running a new wire / installing a switch |

3
wiki/index.md
View File

@@ -1,6 +1,6 @@
# Wiki Index
Last updated: 2026-06-26
Last updated: 2026-06-29
Compiled by: HOWARD-HOME/claude-main
This wiki is LLM-maintained. Do not edit articles manually — run `/wiki-compile` to update.
@@ -58,6 +58,7 @@ Run `/wiki-lint` to check for stale entries and broken backlinks.
| [Universal Minerals International](clients/universal-minerals.md) | Minerals/commodities, Tucson AZ; Syncro 34844920; **break-fix, no prepaid/RMM**; CyndyOffice (HP Pavilion TP01, Win11 Home, QuickBooks Enterprise 22.0) intermittent hard-freeze (Kernel-Power 41, no dump = hardware/firmware) — BIOS F.38 + Fast Startup off + memtest passed 2026-06-10, PSU prime remaining suspect; QB messaging crash-loop repaired; ticket #32397 monitoring; temporary diagnostic RMM agent removed same-day | 2026-06-10 |
| [Putt Land Surveying](clients/putt-land-surveying.md) | Land surveying firm; Syncro 7180175; managed services $223.92/mo; 7 devices; M365 direct (8 mailboxes, cloud-only, 2x Basic + 5x Premium); **DNS wipe 2026-06-09** — all records deleted (MX, SPF, autodiscover, A), email+website down; GoDaddy domain in client's own account (no ACG control); ticket #32404 Waiting on Customer; remediation tools onboarded 2026-06-10 | 2026-06-10 |
| [Gonzvar Tax Services](clients/gonzvar-tax-services.md) | Tax services firm; Syncro 1830740 ("Gonzvar Tax Service", break-fix, ~$175/hr); 6 machines in GuruRMM (GTS.local AD, 2 servers + 4 workstations); open security findings from 2026-06-06 onboarding baseline; QuickBooks RemoteApp + Tailscale VPN pending | 2026-06-12 |
| [Michael Johnson (Law Office)](clients/michaeljohnson.md) | Solo legal practice (inferred — WordPerfect/Seabill, paralegal), Tucson AZ; Syncro 152567 (since 2013), break-fix, no prepaid; mail on Google (not M365); 2-person peer-to-peer workgroup (Michael + Crystal); GuruRMM onboarded 2026-06-29 (site Main, BRIGHT-RIVER-8998) — DESKTOP-GG4LKSL (AMBER) + MJ-PARALEGAL (RED: firewall off + E: 0% free); no backup agent on either; open #32477 onsite printers | 2026-06-29 |
| [Tohono O'odham Nation DoIT](clients/tohono-oodham-doit.md) | Tribal government IT dept; Syncro 33069069; Starlink reseller client — 2x Check Point 1550 field sites on Starlink Roam (CGNAT); break-fix $175/hr; VPN design (IPsec vs Tailscale) pending | 2026-05-27 |
| [Tucson Golden Corral](clients/tucson-golden-corral.md) | Restaurant (Tucson AZ); Syncro 3859123; prepaid block 12.75 hrs; email on Neptune Exchange; WS2016 single-box DC/RDS/Hyper-V/SQL + Sage 100 ERP (TGC-SERVER colocated at ACG main office); architecture concerns outstanding | 2026-05-26 |
| [Russo Law Firm](clients/russo-law.md) | Tucson law practice; Syncro 23331699; managed $543.50/mo (GPS+AV+backup+Seafile hosting+Office) + OIT phone $45.44/mo; 12 prepaid hrs; M365 rrs-law.com (~3 seats, admin guru@ vaulted); **active pre-sales 2026-06: wants to move ~6.5 TB from Seafile to SharePoint — full live move ~$1,120/mo (~$13.4K/yr), recommend hybrid (SP Online working set + Seafile bulk); phone meeting pending, client not yet responded** | 2026-06-15 |