azcomputerguru/claudetools
1
0
Fork 0
Code Issues 58 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-07-22 16:24:03

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-22 16:24:03
This commit is contained in:
Howard Enos
2026-07-22 16:24:36 -07:00
parent 72506d16b9
commit 1768a76d82
4 changed files with 77 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
wiki/clients/cascades-tucson.md
View File

@@ -151,7 +151,7 @@ On-prem AD `cascades.local` synced to Entra/M365 via Entra Connect (PHS + Seamle
### Caregiver roster & FGPP
- **`SG-Caregivers` = frontline caregivers ONLY.** Roster: 35 as of 2026-07-01 (8 offboarded, 4 new hires added, Zeke Huerta moved to front desk). Admin-adjacent staff, `pilot.test`, disabled accounts excluded. All writes via CS-SERVER/RMM (Cloud/Graph writes fail HTTP 400).
- **`SG-Caregivers` = frontline caregivers ONLY.** Roster: 36 as of 2026-07-22 (8 offboarded, 5 new hires added, Zeke Huerta moved to front desk). Admin-adjacent staff, `pilot.test`, disabled accounts excluded. All writes via CS-SERVER/RMM (Cloud/Graph writes fail HTTP 400). **Caregivers do NOT get `SG-FolderRedirect` or home folders** -- they use shared Android phones (Intune Shared Device Mode) and kiosk-mode domain desktops (nothing persists between sessions).
- **`PSO-Caregivers` (Fine-Grained Password Policy, created 2026-07-02):** Precedence 10, `MaxPasswordAge=00:00:00` (never expires). Applies to `SG-Caregivers`; removal reverts cohort to 42-day domain default.
- **Juan Andrade (`j.andrade`):** offboard pending as of 7/17 (was due 2026-07-16 PM per coord todo `80716a98`). Verify status — if not done, disable + remove from `SG-Caregivers` + reclaim Business Premium.
@@ -247,6 +247,7 @@ Established 2026-07-09 (Bariffa Sika -> Charity Menle). **Rename, never re-creat
- **ALIS API user:** vault: `clients/cascades-tucson/alis-api-howard-user.sops.yaml`
- **Caregiver temp passwords (2026-06-30):** vault: `clients/cascades-tucson/caregiver-temp-passwords-2026-06-30.sops.yaml`. Retrieve with `vault get` (NOT `get-field`). Do NOT inline values.
- **Caregiver temp passwords (2026-07-01, 4 new hires):** vault: `clients/cascades-tucson/caregiver-temp-passwords-2026-07-01.sops.yaml`. Same retrieval rules.
- **Caregiver temp passwords (2026-07-22, Ronesha White):** vault: `clients/cascades-tucson/caregiver-temp-passwords-2026-07-22.sops.yaml`. Same retrieval rules.
- **Shelby Trozzi (domain account):** vault: `clients/cascades-tucson/shelby-trozzi.sops.yaml`. Not Entra-synced (safe to reset on-prem without M365 impact).
- **pilot.test AD account (test identity for kiosk work):** vault: `clients/cascades-tucson/pilot-test-ad.sops.yaml`. Added to SG-Caregivers 2026-07-17 for kiosk testing. Reclaim when WS3 pilot complete.
- **UOS controller SSH (root):** vault: `infrastructure/uos-server-ssh-key`
@@ -471,6 +472,7 @@ Established 2026-07-09 (Bariffa Sika -> Charity Menle). **Rename, never re-creat
| 2026-07-15 | BEC/vendor-fraud phish (info@syufway.com, fake W-9 "AMYSH Solutions") investigated and remediated. syufway.com + steqm.com blocked in Tenant Allow/Block List. |
| 2026-07-17 | 10 functional/role-based mailboxes converted to shared mailboxes; 6x O365_BUSINESS_PREMIUM + 4x EXCHANGE_S_ESSENTIALS licenses reclaimed. SPB 40 consumed (5 free); O365BP suspended now 23 consumed. |
| 2026-07-17 | NURSESTATION-PC nurse-station kiosk GPO built (WS3 step 3b): Edge SSO via PRT, GPP shortcuts (ALIS/PharmCare/Helpany), AppLocker Packaged App Deny rules for SG-Caregivers, UI restrictions, machine-level printers. ASSISTNURSE-PC pending. |
| 2026-07-22 | New caregiver onboarded: Ronesha White (`r.white@cascadestucson.com`). AD + SG-Caregivers + Entra sync + M365 Business Premium. No SG-FolderRedirect (caregivers use kiosk desktops + shared phones). ALIS record pending (Howard creating manually). SG-Caregivers now 36. |
---