sync: auto-sync from HOWARD-HOME at 2026-06-09 10:33:12
Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-06-09 10:33:12
This commit is contained in:
@@ -322,8 +322,8 @@ GPOs exist but effectiveness is limited since most PCs are not domain-joined. Al
|
||||
| Default Domain Controllers Policy | OU=Domain Controllers | IIS app pool audit rights, print operator driver loading. | OK |
|
||||
| Power Options | — | "Cascades Default" power plan: never sleep/hibernate, display off 15 min (plugged in) / 10 min (battery), password on wake. | Keep |
|
||||
| CSC - Always Wait For Network | — | AlwaysWaitForNetwork + synchronous logon | Pre-existing |
|
||||
| CSC - Folder Redirection (LE) | OU=Life Enrichment | Documents + Downloads → `\\CS-SERVER\homes\%USERNAME%\`. GrantExclusive=false, MoveContents=true. | LIVE — Sharon Edwards + Susan Hicks |
|
||||
| CSC - Folder Redirection | — | Same as LE GPO but for all staff OUs. UNLINKED. | Blocked on Phase 3 |
|
||||
| CSC - Folder Redirection (LE) | OU=Life Enrichment | **BROKEN — `\User` tree is completely empty (no fdeploy at all).** Sharon/Susan only ever worked via the manual registry workaround. Retire it (move LE users into SG-FolderRedirect) or apply the `fdeploy.ini` fix. | `{889BE7BE-202E-4153-89AD-B5DB62A52D25}` |
|
||||
| CSC - Folder Redirection | OU=Departments (filtered to SG-FolderRedirect) | 5 folders (Desktop/Documents/Downloads/Music/Pictures) → `\\CS-SERVER\Homes\%USERNAME%\`, Flags=187. **FIXED 2026-06-08:** redirect targets were in a misnamed `fdeploy1.ini` (Windows reads `fdeploy.ini`, which was absent) → native FR was DOA, hence the per-machine registry workaround. Wrote correct `fdeploy.ini` (`clients/cascades-tucson/gpo/fdeploy.ini`) + version bump 917506→983042 (GPT.INI + AD versionNumber). Native FR now works on first logon. | `{512B43A4-F049-4CE5-BFAC-860AD13E92BE}`. Backup: `C:\Windows\Temp\frfix-20260608-161144` |
|
||||
| CSC - Life Enrichment Printers | OU=Life Enrichment | Printer preferences for LE staff | LIVE |
|
||||
| CSC - Security Baseline | UNLINKED | Screen lock 15 min / password on resume (HKCU). GptTmpl.inf: password min 12, history 24, max-age 90, lockout 5/30. | Created 2026-05-20. Link at domain root at Phase 3. |
|
||||
| CSC - Windows Update | UNLINKED | AUOptions=4 (auto DL+install), Sunday 3 AM, NoAutoRebootWithLoggedOnUsers=1, featured software off. | Created 2026-05-20. Link at domain root at Phase 3. |
|
||||
|
||||
23
clients/cascades-tucson/gpo/fdeploy.ini
Normal file
23
clients/cascades-tucson/gpo/fdeploy.ini
Normal file
@@ -0,0 +1,23 @@
|
||||
[version]
|
||||
version=100
|
||||
[Folder_Redirection]
|
||||
{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}=s-1-1-0;
|
||||
{FDD39AD0-238F-46AF-ADB4-6C85480369C7}=s-1-1-0;
|
||||
{33E28130-4E1E-4676-835A-98395C3BC3BB}=s-1-1-0;
|
||||
{374DE290-123F-4565-9164-39C4925E467B}=s-1-1-0;
|
||||
{4BD8D571-6D19-48D3-BE97-422220080E43}=s-1-1-0;
|
||||
[{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}_s-1-1-0]
|
||||
Flags=187
|
||||
FullPath=\\CS-SERVER\Homes\%USERNAME%\Desktop
|
||||
[{FDD39AD0-238F-46AF-ADB4-6C85480369C7}_s-1-1-0]
|
||||
Flags=187
|
||||
FullPath=\\CS-SERVER\Homes\%USERNAME%\Documents
|
||||
[{33E28130-4E1E-4676-835A-98395C3BC3BB}_s-1-1-0]
|
||||
Flags=187
|
||||
FullPath=\\CS-SERVER\Homes\%USERNAME%\Pictures
|
||||
[{374DE290-123F-4565-9164-39C4925E467B}_s-1-1-0]
|
||||
Flags=187
|
||||
FullPath=\\CS-SERVER\Homes\%USERNAME%\Downloads
|
||||
[{4BD8D571-6D19-48D3-BE97-422220080E43}_s-1-1-0]
|
||||
Flags=187
|
||||
FullPath=\\CS-SERVER\Homes\%USERNAME%\Music
|
||||
@@ -0,0 +1,133 @@
|
||||
# Cascades of Tucson — Session Log 2026-06-09 — Crashed-session billing recovery + machine wiki update
|
||||
|
||||
## User
|
||||
- **User:** Howard Enos (howard)
|
||||
- **Machine:** Howard-Home
|
||||
- **Role:** tech
|
||||
|
||||
## Session Summary
|
||||
|
||||
Recovered from a crashed prior session (transcript `179fa696`, 2026-06-08 17:02) to confirm billing
|
||||
state and finish documentation. Reconstructed the crashed session's work from the transcript: Chris
|
||||
Knight workstation setup + the Folder Redirection GPO root-cause fix (both already documented), then
|
||||
an ASSISTNURSE-PC reinstall cleanup (delete stale RMM agent, deploy caregiver shortcuts) that ran
|
||||
right before the crash. The open question was "did billing get entered?"
|
||||
|
||||
Reconciled the crashed transcript's billing claims against live Syncro and found the narrative was
|
||||
partly wrong. Ticket #32330 "New computer for Chris Knight" (id 111216087) **was** genuinely billed
|
||||
during the crashed session — invoice #67790 exists ($0.00 prepaid, 1.0h onsite line item attributed
|
||||
to Howard) — so that work persisted server-side despite the crash. But two transcript claims did NOT
|
||||
match reality: it claimed status was set to Invoiced (live showed **Resolved**) and claimed prepay
|
||||
went 8.75→7.75 (live block was **57.75**, a ~50h discrepancy — almost certainly a prepaid top-up
|
||||
between 06-08 and 06-09). Corrected #32330 status Resolved→Invoiced. The ASSISTNURSE-PC reinstall
|
||||
work had no ticket and was never billed.
|
||||
|
||||
Per Howard's direction, prepared (but did NOT execute) billing for the ASSISTNURSE-PC reinstall:
|
||||
1.0h onsite on existing ticket **#32303 "Domain setup-entra sync"** (id 110680053), for the clean
|
||||
Windows 11 reinstall (was Win10; in-place upgrades failed, clean install the only option). Built the
|
||||
full billing preview (resolution comment + line item + prepaid invoice that nets $0.00 and draws
|
||||
57.75→56.75) and paused at the confirmation gate — Howard pivoted to other questions, so this
|
||||
billing remains pending his confirm.
|
||||
|
||||
Answered two inventory questions: (1) Cascades machines upgraded to Win11 with our key
|
||||
(DESKTOP-ROK7VNM, MAINTENANCE-PC documented "manual key"; DESKTOP-DLTAGOI same 04-13 batch;
|
||||
ASSISTNURSE-PC just done — with the caveat that in-place Win10 Pro→11 Pro reuses the existing digital
|
||||
license and consumes no key, so a live partial-product-key RMM sweep is the only definitive check);
|
||||
and (2) the caregiver/medtech laptops+desktops we upgraded (LAPTOP-DRQ5L558 + LAPTOP-E0STJJE8 were
|
||||
Win10 Home→Win11 Pro = our key, Laptop2 already Pro, LAPTOP-8P7HDSEI Win10→Win11, ASSISTNURSE-PC
|
||||
clean reinstall, NURSESTATION-PC Pro→Pro = no key). Finally updated the Cascades wiki to reflect the
|
||||
machine changes and the corrected hour balance.
|
||||
|
||||
## Key Decisions
|
||||
|
||||
- **Did not redo #32330 billing.** Live Syncro confirmed invoice #67790 already exists and the line
|
||||
item is on the ticket; re-billing would double-charge. Only the cosmetic status flag (Resolved→
|
||||
Invoiced) needed fixing.
|
||||
- **Trusted live Syncro over the crashed transcript and the wiki.** The transcript's prepay figures
|
||||
(8.75→7.75) and the wiki's 7.75 were both wrong against the live 57.75 block. Recorded the live
|
||||
value and flagged the old chain as pre-top-up so future sessions don't trust it.
|
||||
- **Paused ASSISTNURSE-PC billing at the preview.** Howard confirmed ticket (#32303), time (1.0h),
|
||||
and channel (onsite), but moved to other questions before approving the write. Per skill rule
|
||||
(show payload + wait for explicit confirm), did not execute.
|
||||
- **Billed the reinstall to #32303, not a new ticket.** Howard's explicit instruction — #32303 is the
|
||||
umbrella domain-migration ticket and already carries incremental onsite/remote labor.
|
||||
- **Distinguished "upgraded to Win11" from "upgraded with OUR key."** Only Home→Pro and clean
|
||||
installs consume our key; in-place Pro→Pro reuses the device's digital license. Static docs can't
|
||||
reliably tell them apart — offered a read-only RMM partial-product-key sweep as the definitive check.
|
||||
|
||||
## Problems Encountered
|
||||
|
||||
- **Crashed-session transcript narrated false "done" claims.** The dying session reported #32330 as
|
||||
Invoiced with prepay 8.75→7.75; live Syncro showed Resolved / 57.75. Resolved by GET-verifying every
|
||||
claim (ticket status, line items, invoice #67790, customer prepay) against the live API before
|
||||
taking any action — the invoice was real, the status/prepay claims were not.
|
||||
- **No ticket existed for the ASSISTNURSE-PC reinstall.** The crashed session did the RMM cleanup as
|
||||
an aside to Chris Knight's billing and never opened/billed a ticket. Resolved by asking Howard,
|
||||
who directed it to existing ticket #32303.
|
||||
|
||||
## Configuration Changes
|
||||
|
||||
- **Syncro:** PUT ticket #32330 (id 111216087) `status` Resolved → **Invoiced**. Bot alert posted
|
||||
(message_id 1513948832772395230). No new line items or invoices created this session.
|
||||
- **Wiki** (`wiki/clients/cascades-tucson.md`) — 4 edits:
|
||||
1. Profile → Hours remaining: corrected to **57.75 hrs (live 2026-06-09)**, flagged the ~50h
|
||||
top-up vs the old 7.75/8.75/15.75 chain, noted #32330 status fix + pending ASSISTNURSE-PC billing.
|
||||
2. Caregiver device allow-list table: bumped to 6 devices, added **ASSISTNURSE-PC** row (Win11 Pro
|
||||
for WS 24H2, new agent `62d108d6`, old `88891eb8` deleted, needs re-join/re-tag), annotated each
|
||||
laptop's upgrade/key origin, marked LAPTOP-8P7HDSEI state "verify".
|
||||
3. Enrollment-progress note: marked ASSISTNURSE-PC upgraded 2026-06-08 (was "pending").
|
||||
4. History Highlights: added a 2026-06-08 ASSISTNURSE-PC reinstall row.
|
||||
- No repo code changes. This session log created.
|
||||
|
||||
## Credentials & Secrets
|
||||
|
||||
- None discovered or created this session. (Syncro Howard API key + Cascades customer id are already
|
||||
in the `/syncro` skill and wiki.)
|
||||
|
||||
## Infrastructure & Servers
|
||||
|
||||
- **Syncro customer:** Cascades of Tucson, id **20149445**, prepaid block **57.75 hrs** (live 2026-06-09).
|
||||
- **Tickets:** #32330 / 111216087 (Chris Knight new computer — Invoiced, inv #67790 $0.00);
|
||||
#32303 / 110680053 ("Domain setup-entra sync" — Resolved; ASSISTNURSE-PC 1.0h onsite billing pending).
|
||||
- **ASSISTNURSE-PC:** Win11 Pro for Workstations 24H2 after clean reinstall 2026-06-08. GuruRMM agent
|
||||
**`62d108d6`** (`Assistnurse-pc`, v0.6.57, online); stale Win10 agent **`88891eb8`** deleted (HTTP 204).
|
||||
Shared MC medtech device. New Entra device object after reinstall → re-join + re-tag pending.
|
||||
- **Caregiver shortcuts deployed** to `C:\Users\Public\Desktop` on ASSISTNURSE-PC (2026-06-08):
|
||||
ALIS `https://cascadestucson.alisonline.com/Login`, LinkRx `https://pharmcare.linkrxnow.com/Login.aspx`,
|
||||
Helpany `https://app.safe-living.com/login`.
|
||||
|
||||
## Commands & Outputs
|
||||
|
||||
```bash
|
||||
BASE="https://computerguru.syncromsp.com/api/v1"; API_KEY=<howard key>
|
||||
# Verify #32330 — was Resolved with line item present; invoice #67790 exists ($0.00, ticket_id 111216087)
|
||||
curl -s "$BASE/tickets/111216087?api_key=$API_KEY"
|
||||
curl -s "$BASE/invoices/67790?api_key=$API_KEY" # id 1650613747, total 0.0, 1 line
|
||||
curl -s "$BASE/customers/20149445?api_key=$API_KEY" | jq .customer.prepay_hours # 57.75 (not 7.75)
|
||||
# Fix status
|
||||
curl -s -X PUT "$BASE/tickets/111216087?api_key=$API_KEY" -d '{"status":"Invoiced"}' # -> Invoiced
|
||||
```
|
||||
|
||||
## Pending / Incomplete Tasks
|
||||
|
||||
- **[BILLING — awaiting Howard confirm] ASSISTNURSE-PC reinstall:** 1.0h onsite on #32303 (id 110680053),
|
||||
product 26118 (Labor - Onsite Business, $175), prepaid → $0.00, draws 57.75→56.75. Preview built;
|
||||
paused at confirmation gate. Resolution comment drafted (Win10→Win11 clean reinstall + RMM re-enroll +
|
||||
shortcuts). Execute on Howard's "yes."
|
||||
- **[OFFERED] Win11 license-key verification sweep:** read-only RMM pull of partial product key (last 5)
|
||||
+ license channel across the 6 caregiver machines (and optionally the fleet) to definitively identify
|
||||
which carry our key vs reused digital licenses.
|
||||
- **ASSISTNURSE-PC re-join + re-tag** `CSCCaregiverDevice` (new Entra object after reinstall) + clean old
|
||||
Entra device record — at caregiver cutover.
|
||||
- **LAPTOP-8P7HDSEI:** confirm Win11 25H2 upgrade + Entra join/tag state (was pending as of 06-04).
|
||||
- **Unrelated coord todo (not picked up):** Safesite forensic sweep #32395 (coord todo 5766a59f) — two
|
||||
offline recipient machines; flagged from GURU-5070 broadcast, left for a free session.
|
||||
|
||||
## Reference Information
|
||||
|
||||
- Crashed transcript: `~/.claude/projects/C--claudetools/179fa696-48bf-443f-b900-62b05fd408ad.jsonl`.
|
||||
- Tickets: #32330 https://computerguru.syncromsp.com/tickets/111216087 ; #32303 https://computerguru.syncromsp.com/tickets/110680053
|
||||
- Invoice #67790 (id 1650613747) — Chris Knight, $0.00 prepaid.
|
||||
- Win11/key inventory sources: `clients/cascades-tucson/docs/workstations.md` (audited 2026-03-20),
|
||||
`clients/cascades-tucson/session-logs/2026-06-04-howard-caregiver-laptop-enrollment.md` (caregiver device set).
|
||||
- Wiki: `wiki/clients/cascades-tucson.md`.
|
||||
Reference in New Issue
Block a user