From 1b85d70d83665ed9e0318afc639d546e744dd721 Mon Sep 17 00:00:00 2001 From: Howard Enos Date: Sat, 18 Jul 2026 17:36:08 -0700 Subject: [PATCH] sync: auto-sync from HOWARD-HOME at 2026-07-18 17:35:38 Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-07-18 17:35:38 --- ...-cutover-asbuilt-server-migration-start.md | 151 ++++++++++++++++++ 1 file changed, 151 insertions(+) create mode 100644 clients/prairie-schooner/session-logs/2026-07/2026-07-18-howard-cutover-asbuilt-server-migration-start.md diff --git a/clients/prairie-schooner/session-logs/2026-07/2026-07-18-howard-cutover-asbuilt-server-migration-start.md b/clients/prairie-schooner/session-logs/2026-07/2026-07-18-howard-cutover-asbuilt-server-migration-start.md new file mode 100644 index 00000000..4ba21ffd --- /dev/null +++ b/clients/prairie-schooner/session-logs/2026-07/2026-07-18-howard-cutover-asbuilt-server-migration-start.md @@ -0,0 +1,151 @@ +## User +- **User:** Howard Enos (howard) +- **Machine:** Howard-Home +- **Role:** tech + +# The Prairie Schooner — cutover as-built (7/15) + server migration kickoff (7/18) + +> Session recovered from the 7/14 prep log. Covers the 7/15 onsite network swap +> results/documentation/ticketing, then (7/18 evening) the start of the QB/file-server +> migration to TPS-SVR. Session PAUSED mid-migration at the "kill QB on old server" +> confirmation gate — see Pending. + +## Session Summary + +Recovered context from `2026-07-14-howard-network-cutover-prep.md` and resumed. Howard +went onsite 2026-07-15 and completed the NETWORK-ONLY cutover: SonicWall out, UDM Pro in +as gateway (.1). Verified onsite: workstations kept their IPs, internet up, all 3 Yealink +phones registered, QB opened fine against \\tps-server. Workstation fixed IPs were set in +UniFi and the security toggles (Ad Block / DNS Shield / IDS-IPS) confirmed OFF. + +Two topology corrections surfaced onsite: (1) the office switch is a UniFi +USW-Lite-16-PoE that now uplinks to the UDM Pro and was adopted into its console (it +PoE-powers the phones); (2) the device previously inventoried as a separate "USG +gateway" at .136 never existed — that device IS the USW-Lite-16-PoE. Only the SonicWall +was removed. Docs corrected (runbook AS-BUILT section + dhcp plan), `--correction` +logged to errorlog. + +Updated Syncro ticket #32544 (id 113778439) with a customer-visible cutover comment +(including UDM Pro capability upsell text: Protect NVR, VPN, IDS/IPS, traffic +visibility, cloud management) and set status to In Progress. Bot alert posted. + +2026-07-18 evening (staff gone): began the deferred server migration. Created a 7-task +plan mirroring the runbook LATER section. Pre-checks found QBW.exe open ON TPS-SERVER's +console — traced to OUR `guru` admin console session (logged on since 7/7; QBW started +7/14 18:54, i.e. Howard's own cutover-eve verification), plus QBWebConnector running. +Zero workstation SMB file handles on the Quickbooks share. Rebooted all 3 workstations +(Mel-PC, TPS-JAYMI, TPS-Tina) via RMM. Verified server IPs: TPS-SVR correct at .135 +(LOM Port 1, DNS .125+loopback); TPS-SERVER at .125/.120 plus an UNEXPLAINED 10.10.10.5/24 +secondary and Norton DNS (199.85.126.20) in its resolver list — question to Howard +outstanding (he mentioned moving a cable to "the port the pfSense was on from the Cox +modem"). QB Database Server Manager was installed on TPS-SVR by Howard (scan still +pending). Session saved at the confirmation gate for killing QB on the old server. + +## Key Decisions + +- 7/15 was executed network-swap-only per plan; server migration decoupled to tonight + (7/18) with staff gone. +- Machine-side static IPs REJECTED (Howard's question, my recommendation): DHCP renew + preserves IPs via superset pool; workstation IPs don't functionally matter; statics + add typo/blame risk. Lock via UniFi fixed-IP reservations instead — Howard did so + for the PCs. +- The "USG" was never a USG — corrected all docs rather than leaving the stale device + identity (errorlog `--correction` filed). +- DNS flip (.125-first -> .135-first) clarified as a DHCP-handout-order step, unrelated + to physical cabling; stays on the list for after QB is proven on the new server. +- Old-server QB DB service is QuickBooksDB34 => client runs QB Desktop 2024 — DBSM on + TPS-SVR must match 2024, despite the company file being named schoonerQB2025.QBW. + +## Problems Encountered + +- QBW.exe found running on TPS-SERVER console during pre-migration check — initially + looked like a staff session; `query user` showed it is the `guru` admin console + session (since 7/7), QBW started 7/14 18:54 (Howard's own verification). Safe to + kill; awaiting go. +- TPS-SERVER has an unexpected 10.10.10.5/24 secondary IP + Norton DNS + (199.85.126.20) in its DNS list — origin unconfirmed, question pending with Howard. +- Bot alert one-liner failed once (`$CLAUDETOOLS_ROOT` unset in fresh shell — + `/.claude/scripts/post-bot-alert.sh: No such file`); reposted with + `$(git rev-parse --show-toplevel)`. + +## Configuration Changes + +- EDITED `clients/prairie-schooner/cutover-runbook.md` — added AS-BUILT 2026-07-15 + section (swap done, USG-was-the-switch correction, new topology chain, toggles OFF). +- EDITED `clients/prairie-schooner/udm-dhcp-plan.md` — as-built note (switch identity + correction, PC fixed IPs set, switch needs its own fixed IP once noted). +- Syncro #32544: comment 423868403 (customer-visible, cutover summary), status -> + In Progress. +- RMM: rebooted Mel-PC, TPS-JAYMI, TPS-Tina (cmds 311b17d9/f664f1f0/8af9ffd6). +- `errorlog.md`: `--correction` (assumed separate USG existed; it was the + USW-Lite-16-PoE). +- No changes made yet to TPS-SERVER/TPS-SVR beyond read-only checks. + +## Credentials & Secrets + +- None new. `guru` domain-admin console session active on TPS-SERVER since 7/7. + Howard has user logon passwords for workstation QB testing. + +## Infrastructure & Servers + +- Topology (as-built): Cox modem -> UDM Pro (gw 192.168.1.1, DHCP .100-.199, DHCP DNS + .125,.135) -> USW-Lite-16-PoE (adopted; PoE for 3x Yealink) -> endpoints. +- TPS-SERVER (old DC/QB host, 2016): .125 + .120 + UNEXPLAINED 10.10.10.5/24 on + Ethernet; DNS incl. 127.0.0.1 + 199.85.126.20 (Norton). RMM + 4f8dff0c-b033-4f66-9101-9350e32e0a81. QB stack: QBCFMonitorService 3036, + QBDBMgrN 4300, QBW 8652 (since 7/14 18:54), QBWebConnector 11416; services + QuickBooksDB34 Running (QB 2024), DB27/28/31 Disabled. +- TPS-SVR (new DC, 2019): .135 on "Embedded LOM 1 Port 1", DNS .125+127.0.0.1; other + 3 LOM ports unplugged (169.254.x). RMM 799675cf-5c94-465a-b653-63e08d016526. + QB DBSM installed by Howard 7/18 (scan pending). Staged data C:\Share\Quickbooks + (144.2 GB) + C:\Share\Deployment (22.4 GB) from 7/14; shares exist. +- Workstations (all rebooted 7/18): Mel-PC eb2f2aeb-f56e-4fc6-8e5a-73257b95e5f0, + TPS-JAYMI 1fbf4e45-1b48-4c82-af85-847fc1344e12, TPS-Tina + c8d76770-dc9e-45b7-94c7-fdcab3e105a2. (Resolve live before dispatch.) +- All 5 Schooner agents online in GuruRMM as of this session. + +## Commands & Outputs + +- RMM auth: `eval "$(bash .claude/scripts/rmm-auth.sh 2>/dev/null)"`. +- QB pre-check on TPS-SERVER (cmd 78963177): Get-SmbOpenFile *quickbooks* -> only + TINA holding the DIRECTORY handle C:\Share\Quickbooks\ (no file locks); recheck + post-reboot -> zero handles; `query user` -> guru console session Active since 7/7. +- Server IP checks (cmds 181ab92a / f51ad3cf): outputs recorded above. +- Reboot dispatch: `shutdown /r /t 20` via powershell command_type. +- Robocopy delta (NEXT, run on TPS-SVR): source \\tps-server\Quickbooks + + \\tps-server\Deployment -> C:\Share\*, `/E /COPYALL /DCOPY:DAT /R:1 /W:1 /MT:16`, + expect FAILED=0. + +## Pending / Incomplete Tasks + +PAUSED at confirmation gate. Remaining plan (task list in-session): +1. [in progress] Kill QBW.exe (8652) + QBWebConnector (11416), stop QBCFMonitorService + on TPS-SERVER; re-verify zero handles. (Awaiting Howard's "go" — QBW is his own + 7/14 session, safe.) +2. Delta robocopy refresh to TPS-SVR (Quickbooks + Deployment), FAILED=0 gate. +3. Verify shares on TPS-SVR (exist from staging; check perms per runbook). +4. QB DBSM scan of C:\Share\Quickbooks on TPS-SVR (DBSM installed; verify it is 2024 + to match QuickBooksDB34). +5. GPMC: repoint GPP Q: drive map -> \\tps-svr\Quickbooks (Default Domain Policy, + Drives.xml, currently \\tps-server\quickbooks). +6. Workstation relogon + QB multi-user test (Howard has passwords). +7. DNS flip .135-first on UDM Pro AFTER QB proven + update Syncro #32544 with evening + results (customer promised an update "tonight"). +Open question: origin/purpose of 10.10.10.5/24 on TPS-SERVER + which cable Howard +moved ("pfSense port from Cox modem" remark). Also still open: pin phone/NVR/switch +fixed IPs in UniFi; NVR remote view check; AD retirement (FSMO/CA/demote) is a later +visit. + +## Reference Information + +- Runbook: `clients/prairie-schooner/cutover-runbook.md` (AS-BUILT + LATER sections). +- Plan: `clients/prairie-schooner/udm-dhcp-plan.md`. Verify script: + `clients/prairie-schooner/verify-cutover.sh` (not yet run — superseded by manual + onsite verification 7/15). +- Syncro ticket #32544 = id 113778439, + https://computerguru.syncromsp.com/tickets/113778439 (comment 423868403). +- Prior logs: `2026-07-14-howard-network-cutover-prep.md`, + `2026-07-14-howard-sonicwall-usg-to-udmpro-swap-prep.md`, + `2026-07-10-howard-server-migration.md`. +- Wiki: `wiki/clients/the-prairie-schooner.md` (needs recompile after migration). +- Company file: schoonerQB2025.QBW (2.9 GB) — QB Desktop year 2024 (QuickBooksDB34).