azcomputerguru/claudetools
1
0
Fork 0
Code Issues 58 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-07-20 14:46:37

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-20 14:46:37
This commit is contained in:
Howard Enos
2026-07-20 14:47:04 -07:00
parent f356b03473
commit 415568a7f9
3 changed files with 246 additions and 68 deletions
Download Patch File Download Diff File Expand all files Collapse all files

120
wiki/clients/lens-auto-brokerage.md
View File

@@ -2,7 +2,7 @@
type: client
name: lens-auto-brokerage
display_name: Len's Auto Brokerage
last_compiled: 2026-06-17
last_compiled: 2026-07-20
compiled_by: HOWARD-HOME/claude-main
sources:
- clients/lens-auto-brokerage/docs/overview.md
@@ -19,61 +19,107 @@ backlinks: []
# Len's Auto Brokerage
Auto brokerage in Tucson, AZ. Workgroup environment (no AD domain) of ~8 active Windows
endpoints plus one production server, managed by ACG. Defining current concern: a legacy
Windows Server 2008 box (lab-server) still in service and overdue for decommission, with
Deskman and QuickBooks data slated to move to the new Server 2019 box.
Auto brokerage in Tucson, AZ. 7 active Windows workstations plus one production server
(Server 2019 AD DC), managed by ACG. A legacy Windows Server 2008 box (lab-server) is
still powered on running Deskman — the active migration project is to move Deskman data
to the Server 2019 box and decommission the 2008 machine.
## Profile
- **Contract type:** Managed — recurring monthly ($190.87/mo) plus prepaid hour block and ad-hoc project/break-fix labor
- **Key contacts:** 520-247-1089, 520-318-1040 (names not in Syncro — verify). Known staff (from managed endpoints): Becky, Josh, Dawn, Madonna.
- **Billing rate:** (verify — check Syncro labor line items)
- **Hours remaining (prepaid):** 4.25 hrs as of 2026-06-17 (Syncro). Note: 11.0 block hours moved to "AT" on 2025-08-19.
- **Contract type:** Managed — recurring monthly ($190.00/mo) plus prepaid hour block and ad-hoc project/break-fix labor
- **Key contacts:** Becky Kahn (520-247-1089), Michale Haubert (520-318-1040), "Desert RV" (no phone)
- **Billing email:** becky@lensautobrokerage.com
- **Hours remaining (prepaid):** 3.75 hrs as of 2026-07-20 (Syncro). Note: 11.0 block hours moved to "AT" on 2025-08-19.
- **Monthly recurring breakdown:** M365 Apps for Business 1x$10 + GPS basic workstations 7x$20 ($140) + GPS basic server 1x$40 = $190.00/mo
- **Syncro customer ID:** 3289131
- **Managed devices (Syncro assets):** 15 (8 enrolled & online in GuruRMM)
- **Active ticket:** None open in Syncro as of 2026-06-17
- **Managed devices (Syncro assets):** 15 total (9 active, 6 legacy/dead)
- **Open Syncro tickets (as of 2026-07-20):**
- #32363 — Credit card terminal offline since fiber upgrade (2026-06-01)
- #32299 — Brian's Chrome address bar won't search, logs out of tabs (2026-05-19)
- #32147 — Confirm data backup is in place (2026-04-13) — relevant to migration
## Infrastructure
### Servers & Services
| Host | IP | Role | OS | Notes |
|---|---|---|---|---|
| LAB-SVR (Syncro: LENS-SV; old name DESKTOP-BMBTQLI) | 192.168.1.81 | Current production server | Windows Server 2019 Std (10.0.17763) | HPE ProLiant MicroServer Gen10 Plus v2, SN 3M1D1T12PD, 16GB RAM. Server 2019 installed 2026-04-15; enrolled in GuruRMM 2026-06-01. One box, three names. Deskman + QuickBooks migration target. |
| LAB-SERVER (lab-server) | 192.168.1.241 | OLD server — EOL, to decommission | Windows Server 2008 SP2 (6.0.6002) | HP ProLiant ML310e Gen8 v2, SN MX253500HB, Xeon E3-1220 v3. WORKGROUP. EOL since Jan 2020. Still powered; currently runs Deskman + QuickBooks. GuruRMM agent will NOT install (pre-TLS1.2 / UCRT) — decommission instead. |
### Servers
| Host | IP | Role | OS | Hardware | Notes |
|---|---|---|---|---|---|
| LAB-SVR | 192.168.1.82 | Production server, AD DC (LAB.lan), DNS, File Server | Windows Server 2019 Std (10.0.17763) | HPE ProLiant MicroServer Gen10 Plus v2, Xeon E-2314, 16GB RAM, SN 3M1D1T12PD | Installed 2026-04-15. Domain role = Primary Domain Controller (LAB.lan). DNS at 127.0.0.1 (self). C: 1.77TB total / 1.6TB free. Roles: AD DS, DNS, File Server, DFS. MSP360 backup installed. GuruRMM 0.6.66 (needs update to 0.6.79). NO Deskman, NO QuickBooks installed yet. |
| LAB-SERVER | 192.168.1.241 | OLD server — EOL, to decommission | Windows Server 2008 SP2 (6.0.6002) | HP ProLiant ML310e Gen8 v2, Xeon E3-1220 v3, SN MX253500HB | EOL since Jan 2020. Still powered. Runs Deskman. NOT in GuruRMM (pre-TLS1.2). NOT in ScreenConnect. Howard working on getting RMM agent installed. |
### Managed Endpoints (GuruRMM — 8 online)
DESKTOP-0J55V6L (Win11 Home), DESKTOP-JDQMLCE (Win11 Pro), EV-DAWG (Win11 Pro),
Josh-Lens (Win11 Pro), LAB-Becky (Win10 Pro), LAB-DAWN (Win11 Pro), LAB-MADONNA (Win11 Pro),
LAB-SVR (Server 2019). Offline >2mo / Syncro-removed (no action): DESKTOP-LJ825H1, LAB-005252, MATT, PARKER.
**[INFO] LAB-SVR IP is 192.168.1.82 (confirmed live via RMM/SC), not .81 as previously documented.**
**[INFO] LAB-SVR is an AD Domain Controller (LAB.lan) with DNS, but NO workstation is domain-joined — all remain WORKGROUP.**
### Managed Endpoints (7 workstations, all online as of 2026-07-20)
| Host | User | OS | Hardware | IP | Domain | AV | Key Software | Printers |
|---|---|---|---|---|---|---|---|---|
| DESKTOP-0J55V6L | Brian | Win 11 Home 25H2 | Dell OptiPlex 3000, i5-12500, 16GB, SN 6YY8QT3 | .75 | WORKGROUP | Defender only | Office 2010 H&B, Chrome, Manheim Media Player. OLD: LabTech/Automate agent still running, 2x ScreenConnect instances, TeamViewer, AMD Catalyst leftovers | RICOH IM 600SR, HP OJ Pro 9010, Brother HL-L2350DW, Brother HL-L2340D ("Brian's Brother"), Tap to Sign |
| DESKTOP-JDQMLCE | localadmin (Turner) | Win 11 Pro 25H2 | Dell OptiPlex 3090, i5-10505, 16GB, SN 3RV9RN3 | .247 | WORKGROUP | Datto EDR + Avira | Chrome, HDAgent/UpAgent (Derive/SCT), Jump Desktop. No Office. PENDING REBOOT (32+ days uptime, user idle 22+ days) | Tap to Sign, RICOH IM 600SR, HP OJ Pro 9010, Brother HL-L2350DW, Brother HL-L2340D |
| EV-DAWG | Gloss | Win 11 Pro 25H2 | Dell Vostro 3710, i7-12700, 16GB, SN 9849GT3 | .200 | WORKGROUP | Datto EDR + Avira + McAfee (conflict?) | Adobe Acrobat, M365, Dell bloatware, SmartByte | RICOH IM 600SR, HP OJ Pro 9010 |
| Josh-Lens | jupsh | Win 11 Pro 25H2 | Dell Vostro 3710, i7-12700, 16GB, SN 8849GT3 | .87 | WORKGROUP | Datto EDR + Avira + McAfee WebAdvisor | M365, Chrome, Firefox, Jump Desktop, SmartByte | Brother HL-L2340D, Brother HL-L2350DW, RICOH IM 600SR, Tap to Sign |
| LAB-Becky | Becky | Win 10 Pro 22H2 | HP Desktop 460-p214 (refurb), i7-7700T, 16GB, SN 8CG8367635 | .136 | WORKGROUP | Datto EDR + Avira | **QuickBooks Enterprise 20.0 + 24.0**, M365, Adobe Acrobat, Amcrest Surveillance Pro, Intellipay V400, MSP360 backup, ZeroTier, Firefox. D: 2TB Seagate USB (1.85TB free) | RICOH IM 600SR (x2), HP OJ Pro 9010, Brother HL-L2350DW ("Tinas"), Brother HL-L2340D, Tap to Sign, ABS PDF Driver |
| LAB-DAWN | Tina | Win 11 Pro 25H2 | Dell OptiPlex SFF 7010, i5-13500, 16GB, SN FB19704 | .164 | WORKGROUP | Defender only (no Datto EDR) | M365 (multi-language: en/es/fr/pt), Adobe Acrobat, Intellipay V400, ScanSnap Home, Firefox | Brother HL-L2350DW (x2), RICOH IM 600SR, Tap to Sign |
| LAB-MADONNA | Madonna | Win 11 Pro 25H2 | Lenovo ThinkCentre neo 50t Gen 4, i5-12400, 16GB, SN GM0YBWB7 | .229 | WORKGROUP | Defender only (no Datto EDR) | Office 2010 Professional, Adobe Acrobat, Chrome, Google Drive, Firefox, ZeroTier. Shares: "Ricoh Scans" -> C:\Ricoh Scans | RICOH IM 600SR (x2 - WSD + IP .105), HP OJ Pro 9010 (x2), Brother HL-L2350DW, Tap to Sign |
### Shared Printers / Copiers
| Device | IP/Connection | Present On |
|---|---|---|
| RICOH IM 600SR (main copier) | 192.168.1.105 | All workstations |
| HP OfficeJet Pro 9010 | Various (USB/WSD) | Most workstations |
| Brother HL-L2350DW | WSD | Most workstations (labeled "Tinas" on LAB-Becky) |
| Brother HL-L2340D | USB | DESKTOP-0J55V6L ("Brian's Brother"), DESKTOP-JDQMLCE, Josh-Lens |
| Tap to Sign (virtual) | — | Most workstations |
### Network
- **ISP / WAN:** 174.77.67.237
- **LAN:** 192.168.1.0/24
- **Domain:** None — WORKGROUP
- **LAN:** 192.168.1.0/24 (all workstations + LAB-SVR)
- **Gateway/Router:** 192.168.1.1 (UDM, post-fiber-upgrade)
- **DNS (workstations):** 192.168.1.1 (router, NOT LAB-SVR — AD DNS is unused by clients)
- **AD Domain:** LAB.lan (LAB-SVR is DC, but no workstations are joined)
- **RICOH copier:** 192.168.1.105
- **ZeroTier overlay:** LAB-Becky (172.29.188.151 / 192.168.193.130), LAB-MADONNA (192.168.193.234)
- **DHCP:** All endpoints on DHCP
### Anomaly: DESERTRVSERVER in Syncro
Syncro asset ID 4293650 — "DESERTRVSERVER" — is in the Lens Auto Syncro account but on a
completely different subnet (10.0.0.182, gateway 10.0.0.1), domain DESERTRV.local, running
Server 2016 Essentials with Hyper-V, 32GB RAM, WAN 38.72.66.99. This appears to be a
**Desert RV Center** asset misplaced in Len's account. Investigate and reassign.
## Access
- **Remote access:** ScreenConnect (present on endpoints; primary remote method — no AD/GPO)
- **RDP (lab-server):** enabled 2026-04-13 (`fDenyTSConnections=0`); modern-client RDP fails with 0x800706be (CredSSP/TLS incompatibility on Server 2008)
- **GuruRMM:** client `bc76984f-8dc9-42e7-b978-c8def1143144`, site "Main" `d8f69cd8-5c42-43bc-ae45-9cc6078d37fb`, site/enrollment code `UPPER-STAR-2820`
- **Remote access:** ScreenConnect ("LAB - Len's Auto" company tag, all 7 workstations + LAB-SVR online)
- **GuruRMM:** client `bc76984f-8dc9-42e7-b978-c8def1143144`, site "Main" `d8f69cd8-5c42-43bc-ae45-9cc6078d37fb`, enrollment code `UPPER-STAR-2820`
- **Vault path:** `clients/lens-auto-brokerage.sops.yaml`
- **"Swanson, Len"** — CONFIRMED SEPARATE in both RMM (client `607ab79d`, site "Home") and ScreenConnect (CP1 "Swanson, Len"). Personal machine LAS-GAMER at home (WAN 68.109.162.82). No action needed.
## Patterns & Known Issues
- **EOL Server 2008 (lab-server) still in production** — the central risk. No security updates for 6+ years; hosts Deskman + QuickBooks pending migration. GuruRMM agent cannot run on it; it is monitored only by being left until decommission.
- **RDP to lab-server fails (0x800706be)** — CredSSP/TLS layer mismatch between modern clients and Server 2008; expect local-console or legacy security-layer work.
- **Deskman transient update crash** — Deskman `gui.exe` (.NET) can throw `System.UnauthorizedAccessException` (CLR20r3) when opened mid-update; clears on its own once the updater finishes. If it does NOT clear, treat as a permissions/ACL issue (grant Modify on the program/data folder or relocate data to ProgramData).
- **One box, three names** — LAB-SVR (GuruRMM) = LENS-SV (Syncro) = DESKTOP-BMBTQLI (old doc). Confirmed same physical server (SN 3M1D1T12PD, IP .81). Avoid re-investigating as separate machines.
- **"Swanson, Len" is a SEPARATE RMM client** — a personal/home account for the owner (RMM client `607ab79d`, site "Home"), distinct from this business. Do not conflate.
- **EOL Server 2008 (lab-server) still powered on** — runs Deskman, no RMM agent, not in ScreenConnect. The central risk and migration driver.
- **AD DC running but unused** — LAB-SVR is a domain controller (LAB.lan) with DNS, DFS, File Server roles, but zero workstations are domain-joined. All are WORKGROUP with DNS pointing at the router.
- **QuickBooks is on Becky's workstation, NOT the server** — Enterprise 20.0 + 24.0 on LAB-Becky with full QB services running. The old docs said QB was on the 2008 server — verify whether the server copy is still active or if Becky's is the live instance.
- **Deskman not found on ANY RMM-visible machine** — must only exist on the 2008 server (not in RMM). Need to inventory it once RMM is on lab-server or via ScreenConnect backstage.
- **AV coverage gaps** — LAB-DAWN and LAB-MADONNA have Defender only (no Datto EDR). EV-DAWG has McAfee alongside Datto EDR (potential conflict). DESKTOP-0J55V6L has no third-party AV.
- **Stale agents/software** — DESKTOP-0J55V6L still runs old LabTech/Automate agent (LTService), has 2 ScreenConnect instances, TeamViewer, AMD Catalyst leftovers. Office 2010 on Brian's and Madonna's machines.
- **DESKTOP-JDQMLCE** — 32+ day uptime, pending reboot, user idle 22+ days. Likely unused or staging machine. Tagged "Turner" in ScreenConnect.
- **LENS-SV Syncro asset is stale** — last synced Jan 2025, pre-rebuild. Should be archived.
- **LAB-SVR GuruRMM agent** at 0.6.66, fleet is on 0.6.79 — needs update.
- **Deskman transient update crash** — gui.exe (.NET) can throw UnauthorizedAccessException mid-update; self-resolves. If persistent, grant Modify on program/data folder.
- **One box, three names** — LAB-SVR (GuruRMM/SC) = LENS-SV (Syncro) = DESKTOP-BMBTQLI (old doc). SN 3M1D1T12PD, IP .82.
## Active Work
- No open Syncro tickets as of 2026-06-17.
- **Open project — Deskman + QuickBooks migration** off lab-server (2008) to LAB-SVR (2019), then decommission the 2008 box. High priority (security/compliance).
- GuruRMM deployment is COMPLETE & RECONCILED (8 agents online); optional straggler catch via site walkthrough + self-installer (`UPPER-STAR-2820`).
## Active Work — Server 2008 Decommission Project (Tracker #71)
- **Goal:** Migrate Deskman (and verify QuickBooks situation) off lab-server (2008) to LAB-SVR (2019), then decommission the 2008 box.
- **Status as of 2026-07-20:** Planning phase — gathering comprehensive inventory before executing.
- **Howard is working on:** Getting GuruRMM agent onto lab-server (Server 2008) for inventory.
- **Open questions:** See PROJECT_STATE.md for full migration plan and decision points.
- **Related Syncro ticket:** #32147 — Confirm data backup is in place (open since 2026-04-13)
- **Prepaid hours:** 3.75 hrs — migration will likely exceed this, may need block replenishment.
## History Highlights
- **2026-04-13** — Client onboarded: folder/docs created, server inventory taken, RDP enabled on lab-server; CredSSP RDP failure diagnosed; Deskman + QuickBooks migration scoped.
- **2026-04-15** — DESKTOP-BMBTQLI rebuilt as Windows Server 2019 (now LAB-SVR), becoming the production server.
- **2026-06-01** — GuruRMM deployment via ScreenConnect completed and reconciled against Syncro assets (8 endpoints online). Confirmed LAB-SVR = LENS-SV = DESKTOP-BMBTQLI. lab-server confirmed un-enrollable.
- **2026-06-17** — Deskman crash (UnauthorizedAccessException) on lab-server reported by Becky; root-caused as transient mid-update file lock; self-resolved, no fix applied.
- **2026-04-15** — DESKTOP-BMBTQLI rebuilt as Windows Server 2019 (now LAB-SVR), becoming the production server. AD DS + DNS installed.
- **2026-06-01** — GuruRMM deployment via ScreenConnect completed and reconciled against Syncro assets (8 endpoints online).
- **2026-06-17** — Deskman crash (UnauthorizedAccessException) on lab-server reported by Becky; transient mid-update file lock; self-resolved.
- **2026-07-09** — Browser hijack cleanup on Brian's PC (DESKTOP-0J55V6L), Syncro ticket #32525, resolved.
- **2026-07-20** — Comprehensive inventory gathered from RMM/SC/Syncro for migration planning. Deskman confirmed only on 2008 box. QuickBooks confirmed on LAB-Becky (not server).
## Backlinks
*(none yet)*