From 415568a7f9db3e3c3a95926014e9712d10d1d234 Mon Sep 17 00:00:00 2001 From: Howard Enos Date: Mon, 20 Jul 2026 14:47:04 -0700 Subject: [PATCH] sync: auto-sync from HOWARD-HOME at 2026-07-20 14:46:37 Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-07-20 14:46:37 --- clients/lens-auto-brokerage/PROJECT_STATE.md | 192 ++++++++++++++++--- errorlog.md | 2 + wiki/clients/lens-auto-brokerage.md | 120 ++++++++---- 3 files changed, 246 insertions(+), 68 deletions(-) diff --git a/clients/lens-auto-brokerage/PROJECT_STATE.md b/clients/lens-auto-brokerage/PROJECT_STATE.md index 7c572527..a71a6b6a 100644 --- a/clients/lens-auto-brokerage/PROJECT_STATE.md +++ b/clients/lens-auto-brokerage/PROJECT_STATE.md @@ -2,7 +2,7 @@ > READ THIS before starting work on this client. > UPDATE THIS when you begin work (claim a lock) and when you finish (release lock + log changes). -> Last updated: 2026-04-20 +> Last updated: 2026-07-20 --- @@ -12,39 +12,171 @@ |---------|-----------|--------|---------| | _(none active)_ | | | | -**How to claim a lock:** Add a row before starting work. Remove it when done. Locks older than 2 hours with no update are considered stale. - --- ## Current State -**Status:** ACTIVE — PENDING DEPLOYMENT -**Last Activity:** 2026-04-16 +**Status:** ACTIVE — PLANNING (Server 2008 Decommission) +**Last Activity:** 2026-07-20 +**Tracker Issue:** claudetools #71 -Auto brokerage client. GuruRMM agent deployment planned for 10 endpoints via GPO. Scripts and documentation prepared in `docs/` — deployment has not yet been executed. +Comprehensive inventory gathered 2026-07-20 from GuruRMM, ScreenConnect, and Syncro. +Migration plan drafted below. Howard is working on getting RMM onto the old Server 2008 +(lab-server) for direct inventory of Deskman. + +--- + +## Server 2008 Decommission — Migration Plan + +### Scope +Migrate Deskman off the EOL Server 2008 (lab-server, 192.168.1.241) to LAB-SVR +(Server 2019, 192.168.1.82), then decommission the 2008 box. + +### What We Know (as of 2026-07-20) + +**Source machine (lab-server / Server 2008):** +- HP ProLiant ML310e Gen8 v2, Xeon E3-1220 v3, SN MX253500HB +- IP 192.168.1.241, WORKGROUP +- Runs Deskman (confirmed by Becky's 2026-06-17 crash report) +- NOT in GuruRMM, NOT in ScreenConnect — no remote visibility currently +- Howard is working on getting RMM agent installed + +**Target machine (LAB-SVR / Server 2019):** +- HPE ProLiant MicroServer Gen10 Plus v2, Xeon E-2314, 16GB RAM +- IP 192.168.1.82, AD DC for LAB.lan +- C: drive 1.77TB total, 1.6TB free — plenty of space +- Roles installed: AD DS, DNS, File Server, DFS, GPMC +- MSP360 backup running +- NO Deskman installed, NO QuickBooks installed +- GuruRMM 0.6.66 (needs update to 0.6.79) + +**QuickBooks situation — CHANGED from original scope:** +- QuickBooks Enterprise 20.0 + 24.0 is on LAB-Becky (Becky's workstation), NOT the server +- Full QB services running on LAB-Becky (QBCFMonitor, QBUpdate, QBIDP, QBWCMonitor) +- Intellipay V400 payment terminal service also on LAB-Becky +- Original docs said QB was on the 2008 server — need to verify whether there's still a + server-side QB instance or if Becky's is the only live copy +- If QB is only on Becky's machine, it may NOT need to move to the server at all + +### Decision Points (resolve before executing) + +1. **Domain join — yes or no?** + LAB-SVR is already an AD DC (LAB.lan) with DNS, but zero workstations are joined. + All 7 workstations are WORKGROUP with DNS pointing at the router (192.168.1.1). + Options: + - (a) Domain-join the Pro workstations (6 of 7 — Brian's is Win 11 Home, cannot join) + - (b) Leave as WORKGROUP, treat the DC role as unnecessary overhead, possibly demote + - Decision affects: GPO management, centralized auth, printer deployment, share permissions + - **Recommendation:** For a 7-machine shop with no IT staff, WORKGROUP is simpler. + Domain adds complexity they can't self-manage. Unless there's a business need for + centralized policy, consider demoting the DC. + +2. **QuickBooks — does it need to move?** + - If QB is only on Becky's workstation and working fine, leave it there + - If there's a server-side QB instance on the 2008 box, that needs to move or be retired + - Need to check lab-server once RMM is on it (or via ScreenConnect backstage) + +3. **Deskman — what data needs to migrate?** + - Deskman is a lobby/customer management app. Need to identify: + - Where Deskman stores its database (local SQL? file-based?) + - What version is running on the 2008 server + - Is there a newer version compatible with Server 2019? + - Which workstations connect to Deskman on the server (or is it server-only?) + - Once RMM is on lab-server, run inventory to answer these + +4. **Printers — anything to reconfigure?** + - RICOH IM 600SR at 192.168.1.105 is the main copier, installed on all workstations via IP/WSD + - HP OfficeJet Pro 9010, Brother HL-L2350DW/L2340D also on most machines + - If staying WORKGROUP: printers are already direct-to-device, no server dependency + - If domain-joining: could deploy printers via GPO (but adds complexity) + - **Check:** Does lab-server act as a print server for any of these? If so, that role + needs to move. If printers are direct IP/USB on each workstation, no action needed. + +5. **Mapped drives / shares — anything on the 2008 server?** + - No user-facing shares found on LAB-SVR (only NETLOGON/SYSVOL) + - LAB-MADONNA has a local "Ricoh Scans" share (C:\Ricoh Scans) + - **Check:** Does lab-server host any file shares that workstations map to? + Need to inventory shares on the 2008 box once we have access. + +6. **Backup — is the 2008 server's data backed up before we touch it?** + - Syncro ticket #32147 (open since 2026-04-13): "Confirm data backup is in place" + - MSP360 is on LAB-SVR and LAB-Becky — unknown if 2008 server has any backup + - **MUST verify backup of Deskman data before migration begins** + +7. **Hours — will 3.75 prepaid hours cover this?** + - Almost certainly not. A server migration + Deskman install + testing will take + more than 4 hours. Need to discuss block hour replenishment with Len/Becky. + +### Migration Steps (draft — execute after decisions above are resolved) + +**Phase 0: Inventory (IN PROGRESS)** +- [x] Gather RMM/SC/Syncro fleet data (2026-07-20) +- [ ] Get RMM agent on lab-server (Howard working on this) +- [ ] Inventory lab-server: Deskman version + data location, shares, printers, QB presence +- [ ] Confirm QuickBooks situation (server vs Becky's workstation) +- [ ] Verify Deskman data backup exists or create one + +**Phase 1: Prepare target (LAB-SVR)** +- [ ] Update GuruRMM agent to 0.6.79 +- [ ] Install Deskman on LAB-SVR (Server 2019 compatible version) +- [ ] Configure Deskman data location on LAB-SVR +- [ ] If QB needs to move: install QuickBooks on LAB-SVR +- [ ] If file shares exist on 2008: recreate on LAB-SVR +- [ ] If print server role on 2008: recreate on LAB-SVR + +**Phase 2: Migrate data** +- [ ] Copy Deskman database/data from lab-server to LAB-SVR +- [ ] If QB server instance exists: migrate QB data +- [ ] Copy any file shares / user data + +**Phase 3: Cut over** +- [ ] Repoint workstations from lab-server to LAB-SVR for Deskman +- [ ] Test Deskman access from each workstation that uses it +- [ ] Test QB if moved +- [ ] Test all printers, shares, payment terminals + +**Phase 4: Decommission** +- [ ] Run parallel (both servers) for a validation period +- [ ] Power off lab-server +- [ ] Archive/wipe lab-server after validation period +- [ ] Close Syncro ticket #32147 +- [ ] Close tracker issue #71 +- [ ] Update billing if scope changes + +### Cleanup Items (not migration-blocking, but noted) + +| Item | Machine | Notes | +|------|---------|-------| +| Old LabTech/Automate agent (LTService) still running | DESKTOP-0J55V6L | Remove | +| Duplicate ScreenConnect instance | DESKTOP-0J55V6L | Remove old one | +| TeamViewer installed | DESKTOP-0J55V6L | Remove if not needed | +| AMD Catalyst leftovers | DESKTOP-0J55V6L | Uninstall | +| Windows 11 Home (can't domain-join) | DESKTOP-0J55V6L | Upgrade to Pro if domain-joining | +| Office 2010 (EOL) | DESKTOP-0J55V6L, LAB-MADONNA | Upgrade to M365 | +| McAfee alongside Datto EDR | EV-DAWG | Remove McAfee | +| No Datto EDR | LAB-DAWN, LAB-MADONNA, DESKTOP-0J55V6L, LAB-SVR | Deploy | +| Pending reboot (32+ days) | DESKTOP-JDQMLCE | Reboot / investigate if machine is needed | +| localadmin password expired | EV-DAWG | Reset | +| LENS-SV Syncro asset stale (Jan 2025) | Syncro | Archive | +| DESERTRVSERVER in wrong Syncro account | Syncro | Move to Desert RV Center | +| Empty phones billing schedule (#482424) | Syncro | Investigate or remove | +| LAB-SVR GuruRMM agent outdated (0.6.66) | LAB-SVR | Update to 0.6.79 | +| G: drive 0 GB on LAB-MADONNA | LAB-MADONNA | Investigate | --- ## Infrastructure / Access -No server infrastructure details recorded. 10 Windows endpoints to enroll in GuruRMM. +See wiki article: `wiki/clients/lens-auto-brokerage.md` (compiled 2026-07-20) -**GuruRMM deployment command (run via GPO or ScreenConnect):** -```powershell -$u='https://rmm-api.azcomputerguru.com/downloads/gururmm-agent-windows-amd64-latest.exe'; -$d='C:\Windows\Temp\gururmm-agent.exe'; -Invoke-WebRequest $u -UseBasicParsing -OutFile $d; -& $d install --server-url 'wss://rmm-api.azcomputerguru.com/ws' --api-key '' -``` -Note: site enrollment key must be generated for Len's site in GuruRMM dashboard first. - ---- - -## Pending / Next Up - -- [ ] Generate GuruRMM site + enrollment key for Len's Auto Brokerage in RMM dashboard -- [ ] Deploy GuruRMM agent to 10 endpoints via GPO -- [ ] Verify all 10 endpoints enrolled and heartbeating in RMM console +**Quick reference:** +- **GuruRMM client:** `bc76984f-8dc9-42e7-b978-c8def1143144` +- **GuruRMM site:** `d8f69cd8-5c42-43bc-ae45-9cc6078d37fb` (enrollment: `UPPER-STAR-2820`) +- **ScreenConnect company:** "LAB - Len's Auto" +- **Syncro customer ID:** 3289131 +- **Vault path:** `clients/lens-auto-brokerage.sops.yaml` +- **LAN:** 192.168.1.0/24, WAN 174.77.67.237 +- **"Swanson, Len"** is SEPARATE (personal/home, RMM client `607ab79d`, SC "Swanson, Len", WAN 68.109.162.82) --- @@ -52,11 +184,9 @@ Note: site enrollment key must be generated for Len's site in GuruRMM dashboard | Date | By | Change | Status | |------|-----|--------|--------| -| 2026-04-16 | Mike | Client directory created, deployment planned | PENDING | - ---- - -## How to Update - -**When starting:** Add your session to Active Session Locks. -**When finishing:** Remove your lock row, add entries to Recent Changes, update Current State if needed. +| 2026-07-20 | Howard | Full fleet inventory from RMM/SC/Syncro; migration plan drafted; wiki updated | PLANNING | +| 2026-06-17 | Howard | Deskman crash investigation (transient, self-resolved) | RESOLVED | +| 2026-06-01 | Howard | GuruRMM deployment complete (8 agents) | DONE | +| 2026-04-16 | Mike | Client directory created, deployment planned | DONE | +| 2026-04-15 | — | LAB-SVR rebuilt as Server 2019 | DONE | +| 2026-04-13 | — | Client onboarded, lab-server inventoried, RDP enabled | DONE | diff --git a/errorlog.md b/errorlog.md index 5408a199..14f10317 100644 --- a/errorlog.md +++ b/errorlog.md @@ -19,6 +19,8 @@ Categories (the `[type]` tag): _(none)_ = skill/command execution failure · +2026-07-20 | Howard-Home | gururmm-agent | installer fails on Server 2008 SP2 (6.0.6002) -- api-ms-win-core-synch-l1-2-0.dll missing. UCRT/VC++ redist also fails (VersionNT64 condition false -- likely 32-bit OS). No legacy build exists yet (gururmm#88). [ctx: host=LAB-SERVER client=lens-auto os=server2008sp2] + 2026-07-20 | Howard-Home | remediation-tool | get-token: token request failed (no access_token) [ctx: tenant=207fa277-e9d8-4eb7-ada1-1064d2221498 tier=investigator auth=secret err=7000215] 2026-07-20 | Howard-Home | rmm | [correction] Misidentified Datto AV kernel drivers (rtp1/rtp2/rtp_elam/BdNet/BdSentry/netprotection_network_filter*) as orphan Avira/Bitdefender leftovers. Datto AV uses the Bitdefender Endpoint Protection SDK under the hood, so these drivers are signed by Avira Operations GmbH but belong to Datto AV. Disabled and deleted them, breaking Datto AV. Had to restore from the SDK backup dir. Always check C:Program Filesinfocytegentdattoav before assuming BD/Avira drivers are orphans. [ctx: ref=maintenance-pc-cascades machine=MAINTENANCE-PC] diff --git a/wiki/clients/lens-auto-brokerage.md b/wiki/clients/lens-auto-brokerage.md index 22689110..670d4e8c 100644 --- a/wiki/clients/lens-auto-brokerage.md +++ b/wiki/clients/lens-auto-brokerage.md @@ -2,7 +2,7 @@ type: client name: lens-auto-brokerage display_name: Len's Auto Brokerage -last_compiled: 2026-06-17 +last_compiled: 2026-07-20 compiled_by: HOWARD-HOME/claude-main sources: - clients/lens-auto-brokerage/docs/overview.md @@ -19,61 +19,107 @@ backlinks: [] # Len's Auto Brokerage -Auto brokerage in Tucson, AZ. Workgroup environment (no AD domain) of ~8 active Windows -endpoints plus one production server, managed by ACG. Defining current concern: a legacy -Windows Server 2008 box (lab-server) still in service and overdue for decommission, with -Deskman and QuickBooks data slated to move to the new Server 2019 box. +Auto brokerage in Tucson, AZ. 7 active Windows workstations plus one production server +(Server 2019 AD DC), managed by ACG. A legacy Windows Server 2008 box (lab-server) is +still powered on running Deskman — the active migration project is to move Deskman data +to the Server 2019 box and decommission the 2008 machine. ## Profile -- **Contract type:** Managed — recurring monthly ($190.87/mo) plus prepaid hour block and ad-hoc project/break-fix labor -- **Key contacts:** 520-247-1089, 520-318-1040 (names not in Syncro — verify). Known staff (from managed endpoints): Becky, Josh, Dawn, Madonna. -- **Billing rate:** (verify — check Syncro labor line items) -- **Hours remaining (prepaid):** 4.25 hrs as of 2026-06-17 (Syncro). Note: 11.0 block hours moved to "AT" on 2025-08-19. +- **Contract type:** Managed — recurring monthly ($190.00/mo) plus prepaid hour block and ad-hoc project/break-fix labor +- **Key contacts:** Becky Kahn (520-247-1089), Michale Haubert (520-318-1040), "Desert RV" (no phone) +- **Billing email:** becky@lensautobrokerage.com +- **Hours remaining (prepaid):** 3.75 hrs as of 2026-07-20 (Syncro). Note: 11.0 block hours moved to "AT" on 2025-08-19. +- **Monthly recurring breakdown:** M365 Apps for Business 1x$10 + GPS basic workstations 7x$20 ($140) + GPS basic server 1x$40 = $190.00/mo - **Syncro customer ID:** 3289131 -- **Managed devices (Syncro assets):** 15 (8 enrolled & online in GuruRMM) -- **Active ticket:** None open in Syncro as of 2026-06-17 +- **Managed devices (Syncro assets):** 15 total (9 active, 6 legacy/dead) +- **Open Syncro tickets (as of 2026-07-20):** + - #32363 — Credit card terminal offline since fiber upgrade (2026-06-01) + - #32299 — Brian's Chrome address bar won't search, logs out of tabs (2026-05-19) + - #32147 — Confirm data backup is in place (2026-04-13) — relevant to migration ## Infrastructure -### Servers & Services -| Host | IP | Role | OS | Notes | -|---|---|---|---|---| -| LAB-SVR (Syncro: LENS-SV; old name DESKTOP-BMBTQLI) | 192.168.1.81 | Current production server | Windows Server 2019 Std (10.0.17763) | HPE ProLiant MicroServer Gen10 Plus v2, SN 3M1D1T12PD, 16GB RAM. Server 2019 installed 2026-04-15; enrolled in GuruRMM 2026-06-01. One box, three names. Deskman + QuickBooks migration target. | -| LAB-SERVER (lab-server) | 192.168.1.241 | OLD server — EOL, to decommission | Windows Server 2008 SP2 (6.0.6002) | HP ProLiant ML310e Gen8 v2, SN MX253500HB, Xeon E3-1220 v3. WORKGROUP. EOL since Jan 2020. Still powered; currently runs Deskman + QuickBooks. GuruRMM agent will NOT install (pre-TLS1.2 / UCRT) — decommission instead. | +### Servers +| Host | IP | Role | OS | Hardware | Notes | +|---|---|---|---|---|---| +| LAB-SVR | 192.168.1.82 | Production server, AD DC (LAB.lan), DNS, File Server | Windows Server 2019 Std (10.0.17763) | HPE ProLiant MicroServer Gen10 Plus v2, Xeon E-2314, 16GB RAM, SN 3M1D1T12PD | Installed 2026-04-15. Domain role = Primary Domain Controller (LAB.lan). DNS at 127.0.0.1 (self). C: 1.77TB total / 1.6TB free. Roles: AD DS, DNS, File Server, DFS. MSP360 backup installed. GuruRMM 0.6.66 (needs update to 0.6.79). NO Deskman, NO QuickBooks installed yet. | +| LAB-SERVER | 192.168.1.241 | OLD server — EOL, to decommission | Windows Server 2008 SP2 (6.0.6002) | HP ProLiant ML310e Gen8 v2, Xeon E3-1220 v3, SN MX253500HB | EOL since Jan 2020. Still powered. Runs Deskman. NOT in GuruRMM (pre-TLS1.2). NOT in ScreenConnect. Howard working on getting RMM agent installed. | -### Managed Endpoints (GuruRMM — 8 online) -DESKTOP-0J55V6L (Win11 Home), DESKTOP-JDQMLCE (Win11 Pro), EV-DAWG (Win11 Pro), -Josh-Lens (Win11 Pro), LAB-Becky (Win10 Pro), LAB-DAWN (Win11 Pro), LAB-MADONNA (Win11 Pro), -LAB-SVR (Server 2019). Offline >2mo / Syncro-removed (no action): DESKTOP-LJ825H1, LAB-005252, MATT, PARKER. +**[INFO] LAB-SVR IP is 192.168.1.82 (confirmed live via RMM/SC), not .81 as previously documented.** + +**[INFO] LAB-SVR is an AD Domain Controller (LAB.lan) with DNS, but NO workstation is domain-joined — all remain WORKGROUP.** + +### Managed Endpoints (7 workstations, all online as of 2026-07-20) + +| Host | User | OS | Hardware | IP | Domain | AV | Key Software | Printers | +|---|---|---|---|---|---|---|---|---| +| DESKTOP-0J55V6L | Brian | Win 11 Home 25H2 | Dell OptiPlex 3000, i5-12500, 16GB, SN 6YY8QT3 | .75 | WORKGROUP | Defender only | Office 2010 H&B, Chrome, Manheim Media Player. OLD: LabTech/Automate agent still running, 2x ScreenConnect instances, TeamViewer, AMD Catalyst leftovers | RICOH IM 600SR, HP OJ Pro 9010, Brother HL-L2350DW, Brother HL-L2340D ("Brian's Brother"), Tap to Sign | +| DESKTOP-JDQMLCE | localadmin (Turner) | Win 11 Pro 25H2 | Dell OptiPlex 3090, i5-10505, 16GB, SN 3RV9RN3 | .247 | WORKGROUP | Datto EDR + Avira | Chrome, HDAgent/UpAgent (Derive/SCT), Jump Desktop. No Office. PENDING REBOOT (32+ days uptime, user idle 22+ days) | Tap to Sign, RICOH IM 600SR, HP OJ Pro 9010, Brother HL-L2350DW, Brother HL-L2340D | +| EV-DAWG | Gloss | Win 11 Pro 25H2 | Dell Vostro 3710, i7-12700, 16GB, SN 9849GT3 | .200 | WORKGROUP | Datto EDR + Avira + McAfee (conflict?) | Adobe Acrobat, M365, Dell bloatware, SmartByte | RICOH IM 600SR, HP OJ Pro 9010 | +| Josh-Lens | jupsh | Win 11 Pro 25H2 | Dell Vostro 3710, i7-12700, 16GB, SN 8849GT3 | .87 | WORKGROUP | Datto EDR + Avira + McAfee WebAdvisor | M365, Chrome, Firefox, Jump Desktop, SmartByte | Brother HL-L2340D, Brother HL-L2350DW, RICOH IM 600SR, Tap to Sign | +| LAB-Becky | Becky | Win 10 Pro 22H2 | HP Desktop 460-p214 (refurb), i7-7700T, 16GB, SN 8CG8367635 | .136 | WORKGROUP | Datto EDR + Avira | **QuickBooks Enterprise 20.0 + 24.0**, M365, Adobe Acrobat, Amcrest Surveillance Pro, Intellipay V400, MSP360 backup, ZeroTier, Firefox. D: 2TB Seagate USB (1.85TB free) | RICOH IM 600SR (x2), HP OJ Pro 9010, Brother HL-L2350DW ("Tinas"), Brother HL-L2340D, Tap to Sign, ABS PDF Driver | +| LAB-DAWN | Tina | Win 11 Pro 25H2 | Dell OptiPlex SFF 7010, i5-13500, 16GB, SN FB19704 | .164 | WORKGROUP | Defender only (no Datto EDR) | M365 (multi-language: en/es/fr/pt), Adobe Acrobat, Intellipay V400, ScanSnap Home, Firefox | Brother HL-L2350DW (x2), RICOH IM 600SR, Tap to Sign | +| LAB-MADONNA | Madonna | Win 11 Pro 25H2 | Lenovo ThinkCentre neo 50t Gen 4, i5-12400, 16GB, SN GM0YBWB7 | .229 | WORKGROUP | Defender only (no Datto EDR) | Office 2010 Professional, Adobe Acrobat, Chrome, Google Drive, Firefox, ZeroTier. Shares: "Ricoh Scans" -> C:\Ricoh Scans | RICOH IM 600SR (x2 - WSD + IP .105), HP OJ Pro 9010 (x2), Brother HL-L2350DW, Tap to Sign | + +### Shared Printers / Copiers +| Device | IP/Connection | Present On | +|---|---|---| +| RICOH IM 600SR (main copier) | 192.168.1.105 | All workstations | +| HP OfficeJet Pro 9010 | Various (USB/WSD) | Most workstations | +| Brother HL-L2350DW | WSD | Most workstations (labeled "Tinas" on LAB-Becky) | +| Brother HL-L2340D | USB | DESKTOP-0J55V6L ("Brian's Brother"), DESKTOP-JDQMLCE, Josh-Lens | +| Tap to Sign (virtual) | — | Most workstations | ### Network - **ISP / WAN:** 174.77.67.237 -- **LAN:** 192.168.1.0/24 -- **Domain:** None — WORKGROUP +- **LAN:** 192.168.1.0/24 (all workstations + LAB-SVR) +- **Gateway/Router:** 192.168.1.1 (UDM, post-fiber-upgrade) +- **DNS (workstations):** 192.168.1.1 (router, NOT LAB-SVR — AD DNS is unused by clients) +- **AD Domain:** LAB.lan (LAB-SVR is DC, but no workstations are joined) +- **RICOH copier:** 192.168.1.105 +- **ZeroTier overlay:** LAB-Becky (172.29.188.151 / 192.168.193.130), LAB-MADONNA (192.168.193.234) +- **DHCP:** All endpoints on DHCP + +### Anomaly: DESERTRVSERVER in Syncro +Syncro asset ID 4293650 — "DESERTRVSERVER" — is in the Lens Auto Syncro account but on a +completely different subnet (10.0.0.182, gateway 10.0.0.1), domain DESERTRV.local, running +Server 2016 Essentials with Hyper-V, 32GB RAM, WAN 38.72.66.99. This appears to be a +**Desert RV Center** asset misplaced in Len's account. Investigate and reassign. ## Access -- **Remote access:** ScreenConnect (present on endpoints; primary remote method — no AD/GPO) -- **RDP (lab-server):** enabled 2026-04-13 (`fDenyTSConnections=0`); modern-client RDP fails with 0x800706be (CredSSP/TLS incompatibility on Server 2008) -- **GuruRMM:** client `bc76984f-8dc9-42e7-b978-c8def1143144`, site "Main" `d8f69cd8-5c42-43bc-ae45-9cc6078d37fb`, site/enrollment code `UPPER-STAR-2820` +- **Remote access:** ScreenConnect ("LAB - Len's Auto" company tag, all 7 workstations + LAB-SVR online) +- **GuruRMM:** client `bc76984f-8dc9-42e7-b978-c8def1143144`, site "Main" `d8f69cd8-5c42-43bc-ae45-9cc6078d37fb`, enrollment code `UPPER-STAR-2820` - **Vault path:** `clients/lens-auto-brokerage.sops.yaml` +- **"Swanson, Len"** — CONFIRMED SEPARATE in both RMM (client `607ab79d`, site "Home") and ScreenConnect (CP1 "Swanson, Len"). Personal machine LAS-GAMER at home (WAN 68.109.162.82). No action needed. ## Patterns & Known Issues -- **EOL Server 2008 (lab-server) still in production** — the central risk. No security updates for 6+ years; hosts Deskman + QuickBooks pending migration. GuruRMM agent cannot run on it; it is monitored only by being left until decommission. -- **RDP to lab-server fails (0x800706be)** — CredSSP/TLS layer mismatch between modern clients and Server 2008; expect local-console or legacy security-layer work. -- **Deskman transient update crash** — Deskman `gui.exe` (.NET) can throw `System.UnauthorizedAccessException` (CLR20r3) when opened mid-update; clears on its own once the updater finishes. If it does NOT clear, treat as a permissions/ACL issue (grant Modify on the program/data folder or relocate data to ProgramData). -- **One box, three names** — LAB-SVR (GuruRMM) = LENS-SV (Syncro) = DESKTOP-BMBTQLI (old doc). Confirmed same physical server (SN 3M1D1T12PD, IP .81). Avoid re-investigating as separate machines. -- **"Swanson, Len" is a SEPARATE RMM client** — a personal/home account for the owner (RMM client `607ab79d`, site "Home"), distinct from this business. Do not conflate. +- **EOL Server 2008 (lab-server) still powered on** — runs Deskman, no RMM agent, not in ScreenConnect. The central risk and migration driver. +- **AD DC running but unused** — LAB-SVR is a domain controller (LAB.lan) with DNS, DFS, File Server roles, but zero workstations are domain-joined. All are WORKGROUP with DNS pointing at the router. +- **QuickBooks is on Becky's workstation, NOT the server** — Enterprise 20.0 + 24.0 on LAB-Becky with full QB services running. The old docs said QB was on the 2008 server — verify whether the server copy is still active or if Becky's is the live instance. +- **Deskman not found on ANY RMM-visible machine** — must only exist on the 2008 server (not in RMM). Need to inventory it once RMM is on lab-server or via ScreenConnect backstage. +- **AV coverage gaps** — LAB-DAWN and LAB-MADONNA have Defender only (no Datto EDR). EV-DAWG has McAfee alongside Datto EDR (potential conflict). DESKTOP-0J55V6L has no third-party AV. +- **Stale agents/software** — DESKTOP-0J55V6L still runs old LabTech/Automate agent (LTService), has 2 ScreenConnect instances, TeamViewer, AMD Catalyst leftovers. Office 2010 on Brian's and Madonna's machines. +- **DESKTOP-JDQMLCE** — 32+ day uptime, pending reboot, user idle 22+ days. Likely unused or staging machine. Tagged "Turner" in ScreenConnect. +- **LENS-SV Syncro asset is stale** — last synced Jan 2025, pre-rebuild. Should be archived. +- **LAB-SVR GuruRMM agent** at 0.6.66, fleet is on 0.6.79 — needs update. +- **Deskman transient update crash** — gui.exe (.NET) can throw UnauthorizedAccessException mid-update; self-resolves. If persistent, grant Modify on program/data folder. +- **One box, three names** — LAB-SVR (GuruRMM/SC) = LENS-SV (Syncro) = DESKTOP-BMBTQLI (old doc). SN 3M1D1T12PD, IP .82. -## Active Work -- No open Syncro tickets as of 2026-06-17. -- **Open project — Deskman + QuickBooks migration** off lab-server (2008) to LAB-SVR (2019), then decommission the 2008 box. High priority (security/compliance). -- GuruRMM deployment is COMPLETE & RECONCILED (8 agents online); optional straggler catch via site walkthrough + self-installer (`UPPER-STAR-2820`). +## Active Work — Server 2008 Decommission Project (Tracker #71) +- **Goal:** Migrate Deskman (and verify QuickBooks situation) off lab-server (2008) to LAB-SVR (2019), then decommission the 2008 box. +- **Status as of 2026-07-20:** Planning phase — gathering comprehensive inventory before executing. +- **Howard is working on:** Getting GuruRMM agent onto lab-server (Server 2008) for inventory. +- **Open questions:** See PROJECT_STATE.md for full migration plan and decision points. +- **Related Syncro ticket:** #32147 — Confirm data backup is in place (open since 2026-04-13) +- **Prepaid hours:** 3.75 hrs — migration will likely exceed this, may need block replenishment. ## History Highlights - **2026-04-13** — Client onboarded: folder/docs created, server inventory taken, RDP enabled on lab-server; CredSSP RDP failure diagnosed; Deskman + QuickBooks migration scoped. -- **2026-04-15** — DESKTOP-BMBTQLI rebuilt as Windows Server 2019 (now LAB-SVR), becoming the production server. -- **2026-06-01** — GuruRMM deployment via ScreenConnect completed and reconciled against Syncro assets (8 endpoints online). Confirmed LAB-SVR = LENS-SV = DESKTOP-BMBTQLI. lab-server confirmed un-enrollable. -- **2026-06-17** — Deskman crash (UnauthorizedAccessException) on lab-server reported by Becky; root-caused as transient mid-update file lock; self-resolved, no fix applied. +- **2026-04-15** — DESKTOP-BMBTQLI rebuilt as Windows Server 2019 (now LAB-SVR), becoming the production server. AD DS + DNS installed. +- **2026-06-01** — GuruRMM deployment via ScreenConnect completed and reconciled against Syncro assets (8 endpoints online). +- **2026-06-17** — Deskman crash (UnauthorizedAccessException) on lab-server reported by Becky; transient mid-update file lock; self-resolved. +- **2026-07-09** — Browser hijack cleanup on Brian's PC (DESKTOP-0J55V6L), Syncro ticket #32525, resolved. +- **2026-07-20** — Comprehensive inventory gathered from RMM/SC/Syncro for migration planning. Deskman confirmed only on 2008 box. QuickBooks confirmed on LAB-Becky (not server). ## Backlinks *(none yet)*