sync: auto-sync from HOWARD-HOME at 2026-06-29 14:23:40

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-29 14:23:40
This commit is contained in:
2026-06-29 14:24:12 -07:00
parent 602c5e5bd6
commit 00af39d369
12 changed files with 2873 additions and 3 deletions

View File

@@ -2,13 +2,14 @@
type: client
name: rednour
display_name: Rednour Law Offices
last_compiled: 2026-06-02
compiled_by: DESKTOP-0O8A1RL/claude-main
last_compiled: 2026-06-29
compiled_by: HOWARD-HOME/claude-main
sources:
- clients/rednour/reports/2026-05-31-onboard-and-rename-emma-to-carla.md
- clients/rednour/reports/2026-06-01-carla-password-set.md
- clients/rednour/reports/2026-06-02-carrie-emma-display-name-stale-pin.md
- clients/rednour/session-logs/2026-06-02-session.md
- clients/rednour/session-logs/2026-06/2026-06-29-howard-legalasst-zip-hang-wp5-win11.md
- session-logs/2026-05-31-mike-rednour-and-claudetools-infra.md
- clients/rednour/onboarding-baselines/FRONTDESKRECEPT-20260529T195614.md
- clients/rednour/onboarding-baselines/LEGALASST-20260529T200647.md
@@ -183,6 +184,44 @@ Created a dedicated standard local account **`nick`** on REDNOURCARRIEVI (Passwo
Operational note: PowerShell `Set-Acl` ACL propagation down Carrie's large Documents tree exceeded the RMM command timeout (twice), and since stdout is dropped on timeout a randomly-generated password was lost each time — generate passwords locally so they survive a timeout (logged to errorlog).
### 2026-06-29 — LEGALASST (legal assistant / "Emma") explorer hang on .zip + WordPerfect 5 save error; Win11 upgrade planned
**Operator: Howard Enos** (reported via Carrie). The legal assistant's workstation
**LEGALASST** (Carla Skinner's box; active local account `emma`, profile `C:\Users\Ale`,
OneDrive `carla@rednourlaw.com`) repeatedly hung explorer when opening files. Diagnosed live
over GuruRMM (agent `18825ea7-df58-47bb-b492-822cb16fb5ec`).
- **explorer HANGS, not crashes** — AppHang Event 1002 (no Event 1000 / faulting module);
~10 in 3h on 2026-06-29, continuing after a 10:52 reboot.
- **Root cause: the built-in Windows Compressed Folders handler** (explorer's zip-as-folder
namespace). Symptom narrowed to **opening `.zip` only** (Word/PDF/folders fine), and the
failing zip is **local (desktop)** — not OneDrive, not a network share. `zipfldr.dll` is
intact + validly signed, so the hang is environmental, not a corrupt handler DLL.
- **Ruled out:** Adobe shell extensions (blocked/tested via the Microsoft `Shell Extensions\
Blocked` list, no change, reverted); AMD Vega driver (only non-MS DLLs in explorer, but
zero TDR events); OneDrive (overlay not even loaded, sync healthy); remapped drives X/Y/Z →
`\\rednourcarrievirt` (Status OK, SMB healthy); `.NET Runtime 1022` "profiling API attach"
(201 events but no `COR_PROFILER` set — benign noise).
- **SFC** (run by Howard) found and repaired corruption (0 unrepairable) — repair pending a
reboot to load.
- **Workaround:** Howard installed **7-Zip 26.02** (`C:\Program Files\7-Zip\7zFM.exe`); it
opens the zips fine (bypasses explorer's zip namespace). Howard to set 7-Zip as default for
`.zip` (and `.7z`/`.rar`, currently unassociated). `.zip` had no UserChoice; 7-Zip only
registered a `7-Zip.iso` ProgId on install.
- **Second issue (same machine): WordPerfect 5 "not enough free space" on save** regardless
of save location, despite Howard verifying ample free space. Leading hypothesis: legacy/
DOS-era WordPerfect free-space miscalculation on large-capacity volumes (free-space value
overflows → false "disk full"). App-level; **the OS upgrade will not fix it**. Mitigate via
DOSBox or a SUBST'd small-capacity save target. Exact WP version/edition (DOS 5.1 vs
Windows) to be confirmed.
- **Plan: upgrade LEGALASST to Windows 11** — expected to resolve the zip-handler hang by
rebuilding the shell/system files (also applies the SFC repair). Verify by opening a local
`.zip` with the *built-in* handler post-upgrade. If the hang persists, next lead is Defender
archive-scan + cloud (MAPS) lookup stalling the shell.
All diagnostic changes were reverted (Adobe/7-Zip Blocked-list test entries removed; an
orphaned RMM diagnostic process killed) — the box was left clean.
## Patterns & Known Issues
- **EWS required for personal contact work.** No app in the ComputerGuru suite holds `Contacts.Read` or `Contacts.ReadWrite` on Graph. Personal contact folder reads and modifications must go through EWS (`full_access_as_app` on the Exchange Operator SP with `ExchangeImpersonation`).
@@ -194,6 +233,18 @@ Operational note: PowerShell `Set-Acl` ACL propagation down Carrie's large Docum
- **macOS RMM agent won't run on Apple Silicon if unsigned.** The site-code installer serves an unsigned aarch64 binary; Apple Silicon SIGKILLs unsigned Mach-O. Until the server publishes a signed/notarized build (`build-macos-signed.sh`), Apple Silicon Mac enrollment fails (blocks Nick's Mac; same root issue likely affects Scileppi's Mac).
- **LEGALASST and REDNOURCARRIEVI are on Win 10 22H2 (EOL).** No security updates since 2025-10-14. Plan OS upgrade to Win 11 or Win 10 newer build.
- **REDNOURCARRIEVI: Defender was off at onboarding.** Confirm it has been re-enabled; it is a critical finding.
- **LEGALASST: built-in Compressed Folders handler hangs explorer on `.zip` open.** Local zips;
Word/PDF fine. `zipfldr.dll` intact (environmental, not a corrupt DLL). AppHang Event 1002,
no faulting module. Workaround = 7-Zip as default for `.zip`. Win11 upgrade planned to
resolve. If it persists post-upgrade, suspect Defender archive-scan + cloud (MAPS) lookup
stalling the shell. To test-disable any shell extension reversibly, add its CLSID to
`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked` (delete to restore).
- **LEGALASST: WordPerfect 5 "not enough free space" on save** despite verified free space and
regardless of save location. Likely legacy free-space overflow on large-capacity volumes;
**OS upgrade will not fix it**; mitigate via DOSBox / SUBST small-capacity drive. Confirm WP
version/edition.
- **`.NET Runtime 1022` "profiling API attach" errors are noise** unless a `COR_PROFILER` env
var is actually set — do not chase them as a hang cause.
## Active Work / Open Items
@@ -202,6 +253,9 @@ Operational note: PowerShell `Set-Acl` ACL propagation down Carrie's large Docum
| P1 | Re-enable Defender on REDNOURCARRIEVI | Howard/Mike | Was off at onboarding 2026-05-29; confirm current state |
| P1 | Remove prior MSP agents (ScreenConnect, Splashtop, Syncro, Datto RMM) | Mike/Howard | Present on all 3 machines; Datto RMM on REDNOURCARRIEVI only |
| P1 | Upgrade LEGALASST and REDNOURCARRIEVI to a supported OS | Mike | Both on Win 10 22H2 (EOL 2025-10-14) |
| P1 | Upgrade LEGALASST to Windows 11 | Mike/Howard | 2026-06-29: expected to resolve the explorer-on-.zip hang (rebuilds shell/system files) + applies pending SFC repair. Pre-reqs: enable fTPM + Secure Boot (Ryzen 3 3200G is Win11-supported), bump RAM from 5.9 GB, remove leftover Syncro agent. Test a local `.zip` with the built-in handler post-upgrade |
| P2 | LEGALASST: WordPerfect 5 "not enough free space" on save | Howard | 2026-06-29: error on save regardless of location; ample free space verified. Likely legacy free-space overflow on large volume; OS upgrade will NOT fix. Mitigate via DOSBox / SUBST small-capacity drive; confirm WP version/edition |
| INTERIM | LEGALASST: set 7-Zip as default for `.zip`/`.7z`/`.rar` | Howard | 2026-06-29: 7-Zip 26.02 installed as workaround for the built-in zip-handler hang; set defaults via 7-Zip GUI (Tools -> Options -> System) |
| DONE | Shared-drive access for Nick Pafford | Howard | 2026-06-25: created local `nick` account on REDNOURCARRIEVI; `Documents` share = Change + NTFS = Modify; cred vaulted `clients/rednour/nick-smb-rednourcarrievi.sops.yaml`; Nick's Apple Silicon Mac mounts `smb://192.168.10.194/Documents` |
| P1 | Fix GuruRMM macOS agent install on Nick's Apple Silicon Mac | Howard/Mike | 2026-06-25 install failed. Likely cause: served aarch64 binary is **unsigned** -> Apple Silicon SIGKILLs it. Fix: serve the signed+notarized binary (`agent/build-macos-signed.sh`, Mike's Developer ID) or ad-hoc `codesign -s -` in the installer. Confirm with Mac log (`killed: 9`). Deferred (limited ScreenConnect session only) |
| P2 | Return visit: phone + printer setup at Rednour | Howard | 2026-06-25: pending; may require running a new wire / installing a switch |