diff --git a/projects/gps-rmm-audit/session-logs/2026-07/2026-07-03-howard-gps-rmm-coverage-audit.md b/projects/gps-rmm-audit/session-logs/2026-07/2026-07-03-howard-gps-rmm-coverage-audit.md
index 77678f1a..3699ffb7 100644
--- a/projects/gps-rmm-audit/session-logs/2026-07/2026-07-03-howard-gps-rmm-coverage-audit.md
+++ b/projects/gps-rmm-audit/session-logs/2026-07/2026-07-03-howard-gps-rmm-coverage-audit.md
@@ -169,3 +169,7 @@ Logged to errorlog (correction + friction). Rest of fleet (unique-named machines
 ## Update: Valley Wide ScreenConnect cleanup
 
 Valley Wide Plastering (cloud UDM-Valley Wide Plastering). Confirmed SINGLE location via UniFi - devices are areas within one campus (North Bridge, East/West Portables, Server Room, staff-desk switches JR/Jesse/Rose/T's/Ty's), not separate buildings, so no site split. Company + Device Type already done by the fleet pass. This pass: fixed 5 mislabeled server device-types (VWP-FILES, VWP_ADSRVR, WINFileSvr, VWP-QBS, VWP-FIN -> Server, per wiki server fleet), set Department on ~16 (Estimator1->Estimating, FRONT64->Front Desk, WIN-ACCT->Accounting, VWP-FIN->Finance, ORDERSTY->Orders, all servers->IT). Skipped 12 person-named/generic (DESKTOP-*, JG64-2, JRW10-64, VWP-ChrisG-L/JESSEIII/JR-L/REANNA/ROSE) as unsure - come-back via wiki. Clean run, no dupes/contamination.
+
+## Update: Grabb & Durando ScreenConnect cleanup
+
+Grabb & Durando Law Office (multi-site: Main Office/Bob's House/Jeff's House; office on UOS UGW3). Company + Device Type done by fleet pass. Set Department on 4 sure machines: GND-SERVER->IT, GND-BOB-PC (Robert Grabb, name partner)->Attorney, GND-JWILL (Jeff Williams)->Attorney, GND-JEFF-2->Attorney. Skipped as unsure (come-back via wiki/user): GND-Reyna + GND-TDIAZ + GND-L-1 (support staff, role unclear), LapTopNinja/DESKTOP-NFK4F5P (generic). SITE skipped: ambiguous - RMM has GND-BOB-PC/GND-JEFF-2 on 'Main Office' but hostnames suggest Bob's/Jeff's House; Grabb office UGW3 UniFi only tracks wireless (0), home offices not on it - can't verify which machines are at Main vs the home-office sites. DESKTOP-NFK4F5P has a duplicate SC session (manual console removal). Come-back: confirm Bob/Jeff machine locations + support-staff departments.