azcomputerguru/claudetools
1
0
Fork 0
Code Issues 59 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-07-20 14:46:37

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-20 14:46:37
This commit is contained in:
Howard Enos
2026-07-20 14:47:04 -07:00
parent f356b03473
commit 415568a7f9
3 changed files with 246 additions and 68 deletions
Download Patch File Download Diff File Expand all files Collapse all files

192
clients/lens-auto-brokerage/PROJECT_STATE.md
View File

@@ -2,7 +2,7 @@
> READ THIS before starting work on this client. > READ THIS before starting work on this client.
> UPDATE THIS when you begin work (claim a lock) and when you finish (release lock + log changes). > UPDATE THIS when you begin work (claim a lock) and when you finish (release lock + log changes).
> Last updated: 2026-04-20 > Last updated: 2026-07-20
--- ---
@@ -12,39 +12,171 @@
|---------|-----------|--------|---------| |---------|-----------|--------|---------|
| _(none active)_ | | | | | _(none active)_ | | | |
**How to claim a lock:** Add a row before starting work. Remove it when done. Locks older than 2 hours with no update are considered stale.
--- ---
## Current State ## Current State
**Status:** ACTIVE — PENDING DEPLOYMENT **Status:** ACTIVE — PLANNING (Server 2008 Decommission)
**Last Activity:** 2026-04-16 **Last Activity:** 2026-07-20
**Tracker Issue:** claudetools #71
Auto brokerage client. GuruRMM agent deployment planned for 10 endpoints via GPO. Scripts and documentation prepared in `docs/` — deployment has not yet been executed. Comprehensive inventory gathered 2026-07-20 from GuruRMM, ScreenConnect, and Syncro.
Migration plan drafted below. Howard is working on getting RMM onto the old Server 2008
(lab-server) for direct inventory of Deskman.
---
## Server 2008 Decommission — Migration Plan
### Scope
Migrate Deskman off the EOL Server 2008 (lab-server, 192.168.1.241) to LAB-SVR
(Server 2019, 192.168.1.82), then decommission the 2008 box.
### What We Know (as of 2026-07-20)
**Source machine (lab-server / Server 2008):**
- HP ProLiant ML310e Gen8 v2, Xeon E3-1220 v3, SN MX253500HB
- IP 192.168.1.241, WORKGROUP
- Runs Deskman (confirmed by Becky's 2026-06-17 crash report)
- NOT in GuruRMM, NOT in ScreenConnect — no remote visibility currently
- Howard is working on getting RMM agent installed
**Target machine (LAB-SVR / Server 2019):**
- HPE ProLiant MicroServer Gen10 Plus v2, Xeon E-2314, 16GB RAM
- IP 192.168.1.82, AD DC for LAB.lan
- C: drive 1.77TB total, 1.6TB free — plenty of space
- Roles installed: AD DS, DNS, File Server, DFS, GPMC
- MSP360 backup running
- NO Deskman installed, NO QuickBooks installed
- GuruRMM 0.6.66 (needs update to 0.6.79)
**QuickBooks situation — CHANGED from original scope:**
- QuickBooks Enterprise 20.0 + 24.0 is on LAB-Becky (Becky's workstation), NOT the server
- Full QB services running on LAB-Becky (QBCFMonitor, QBUpdate, QBIDP, QBWCMonitor)
- Intellipay V400 payment terminal service also on LAB-Becky
- Original docs said QB was on the 2008 server — need to verify whether there's still a
server-side QB instance or if Becky's is the only live copy
- If QB is only on Becky's machine, it may NOT need to move to the server at all
### Decision Points (resolve before executing)
1. **Domain join — yes or no?**
LAB-SVR is already an AD DC (LAB.lan) with DNS, but zero workstations are joined.
All 7 workstations are WORKGROUP with DNS pointing at the router (192.168.1.1).
Options:
- (a) Domain-join the Pro workstations (6 of 7 — Brian's is Win 11 Home, cannot join)
- (b) Leave as WORKGROUP, treat the DC role as unnecessary overhead, possibly demote
- Decision affects: GPO management, centralized auth, printer deployment, share permissions
- **Recommendation:** For a 7-machine shop with no IT staff, WORKGROUP is simpler.
Domain adds complexity they can't self-manage. Unless there's a business need for
centralized policy, consider demoting the DC.
2. **QuickBooks — does it need to move?**
- If QB is only on Becky's workstation and working fine, leave it there
- If there's a server-side QB instance on the 2008 box, that needs to move or be retired
- Need to check lab-server once RMM is on it (or via ScreenConnect backstage)
3. **Deskman — what data needs to migrate?**
- Deskman is a lobby/customer management app. Need to identify:
- Where Deskman stores its database (local SQL? file-based?)
- What version is running on the 2008 server
- Is there a newer version compatible with Server 2019?
- Which workstations connect to Deskman on the server (or is it server-only?)
- Once RMM is on lab-server, run inventory to answer these
4. **Printers — anything to reconfigure?**
- RICOH IM 600SR at 192.168.1.105 is the main copier, installed on all workstations via IP/WSD
- HP OfficeJet Pro 9010, Brother HL-L2350DW/L2340D also on most machines
- If staying WORKGROUP: printers are already direct-to-device, no server dependency
- If domain-joining: could deploy printers via GPO (but adds complexity)
- **Check:** Does lab-server act as a print server for any of these? If so, that role
needs to move. If printers are direct IP/USB on each workstation, no action needed.
5. **Mapped drives / shares — anything on the 2008 server?**
- No user-facing shares found on LAB-SVR (only NETLOGON/SYSVOL)
- LAB-MADONNA has a local "Ricoh Scans" share (C:\Ricoh Scans)
- **Check:** Does lab-server host any file shares that workstations map to?
Need to inventory shares on the 2008 box once we have access.
6. **Backup — is the 2008 server's data backed up before we touch it?**
- Syncro ticket #32147 (open since 2026-04-13): "Confirm data backup is in place"
- MSP360 is on LAB-SVR and LAB-Becky — unknown if 2008 server has any backup
- **MUST verify backup of Deskman data before migration begins**
7. **Hours — will 3.75 prepaid hours cover this?**
- Almost certainly not. A server migration + Deskman install + testing will take
more than 4 hours. Need to discuss block hour replenishment with Len/Becky.
### Migration Steps (draft — execute after decisions above are resolved)
**Phase 0: Inventory (IN PROGRESS)**
- [x] Gather RMM/SC/Syncro fleet data (2026-07-20)
- [ ] Get RMM agent on lab-server (Howard working on this)
- [ ] Inventory lab-server: Deskman version + data location, shares, printers, QB presence
- [ ] Confirm QuickBooks situation (server vs Becky's workstation)
- [ ] Verify Deskman data backup exists or create one
**Phase 1: Prepare target (LAB-SVR)**
- [ ] Update GuruRMM agent to 0.6.79
- [ ] Install Deskman on LAB-SVR (Server 2019 compatible version)
- [ ] Configure Deskman data location on LAB-SVR
- [ ] If QB needs to move: install QuickBooks on LAB-SVR
- [ ] If file shares exist on 2008: recreate on LAB-SVR
- [ ] If print server role on 2008: recreate on LAB-SVR
**Phase 2: Migrate data**
- [ ] Copy Deskman database/data from lab-server to LAB-SVR
- [ ] If QB server instance exists: migrate QB data
- [ ] Copy any file shares / user data
**Phase 3: Cut over**
- [ ] Repoint workstations from lab-server to LAB-SVR for Deskman
- [ ] Test Deskman access from each workstation that uses it
- [ ] Test QB if moved
- [ ] Test all printers, shares, payment terminals
**Phase 4: Decommission**
- [ ] Run parallel (both servers) for a validation period
- [ ] Power off lab-server
- [ ] Archive/wipe lab-server after validation period
- [ ] Close Syncro ticket #32147
- [ ] Close tracker issue #71
- [ ] Update billing if scope changes
### Cleanup Items (not migration-blocking, but noted)
| Item | Machine | Notes |
|------|---------|-------|
| Old LabTech/Automate agent (LTService) still running | DESKTOP-0J55V6L | Remove |
| Duplicate ScreenConnect instance | DESKTOP-0J55V6L | Remove old one |
| TeamViewer installed | DESKTOP-0J55V6L | Remove if not needed |
| AMD Catalyst leftovers | DESKTOP-0J55V6L | Uninstall |
| Windows 11 Home (can't domain-join) | DESKTOP-0J55V6L | Upgrade to Pro if domain-joining |
| Office 2010 (EOL) | DESKTOP-0J55V6L, LAB-MADONNA | Upgrade to M365 |
| McAfee alongside Datto EDR | EV-DAWG | Remove McAfee |
| No Datto EDR | LAB-DAWN, LAB-MADONNA, DESKTOP-0J55V6L, LAB-SVR | Deploy |
| Pending reboot (32+ days) | DESKTOP-JDQMLCE | Reboot / investigate if machine is needed |
| localadmin password expired | EV-DAWG | Reset |
| LENS-SV Syncro asset stale (Jan 2025) | Syncro | Archive |
| DESERTRVSERVER in wrong Syncro account | Syncro | Move to Desert RV Center |
| Empty phones billing schedule (#482424) | Syncro | Investigate or remove |
| LAB-SVR GuruRMM agent outdated (0.6.66) | LAB-SVR | Update to 0.6.79 |
| G: drive 0 GB on LAB-MADONNA | LAB-MADONNA | Investigate |
--- ---
## Infrastructure / Access ## Infrastructure / Access
No server infrastructure details recorded. 10 Windows endpoints to enroll in GuruRMM. See wiki article: `wiki/clients/lens-auto-brokerage.md` (compiled 2026-07-20)
**GuruRMM deployment command (run via GPO or ScreenConnect):** **Quick reference:**
```powershell - **GuruRMM client:** `bc76984f-8dc9-42e7-b978-c8def1143144`
$u='https://rmm-api.azcomputerguru.com/downloads/gururmm-agent-windows-amd64-latest.exe'; - **GuruRMM site:** `d8f69cd8-5c42-43bc-ae45-9cc6078d37fb` (enrollment: `UPPER-STAR-2820`)
$d='C:\Windows\Temp\gururmm-agent.exe'; - **ScreenConnect company:** "LAB - Len's Auto"
Invoke-WebRequest $u -UseBasicParsing -OutFile $d; - **Syncro customer ID:** 3289131
& $d install --server-url 'wss://rmm-api.azcomputerguru.com/ws' --api-key '<SITE_KEY>' - **Vault path:** `clients/lens-auto-brokerage.sops.yaml`
``` - **LAN:** 192.168.1.0/24, WAN 174.77.67.237
Note: site enrollment key must be generated for Len's site in GuruRMM dashboard first. - **"Swanson, Len"** is SEPARATE (personal/home, RMM client `607ab79d`, SC "Swanson, Len", WAN 68.109.162.82)
---
## Pending / Next Up
- [ ] Generate GuruRMM site + enrollment key for Len's Auto Brokerage in RMM dashboard
- [ ] Deploy GuruRMM agent to 10 endpoints via GPO
- [ ] Verify all 10 endpoints enrolled and heartbeating in RMM console
--- ---
@@ -52,11 +184,9 @@ Note: site enrollment key must be generated for Len's site in GuruRMM dashboard
| Date | By | Change | Status | | Date | By | Change | Status |
|------|-----|--------|--------| |------|-----|--------|--------|
| 2026-04-16 | Mike | Client directory created, deployment planned | PENDING | | 2026-07-20 | Howard | Full fleet inventory from RMM/SC/Syncro; migration plan drafted; wiki updated | PLANNING |
| 2026-06-17 | Howard | Deskman crash investigation (transient, self-resolved) | RESOLVED |
--- | 2026-06-01 | Howard | GuruRMM deployment complete (8 agents) | DONE |
| 2026-04-16 | Mike | Client directory created, deployment planned | DONE |
## How to Update | 2026-04-15 | — | LAB-SVR rebuilt as Server 2019 | DONE |
| 2026-04-13 | — | Client onboarded, lab-server inventoried, RDP enabled | DONE |
**When starting:** Add your session to Active Session Locks.
**When finishing:** Remove your lock row, add entries to Recent Changes, update Current State if needed.

2
errorlog.md
View File

@@ -19,6 +19,8 @@ Categories (the `[type]` tag): _(none)_ = skill/command execution failure ·
<!-- Append entries below this line --> <!-- Append entries below this line -->
2026-07-20 | Howard-Home | gururmm-agent | installer fails on Server 2008 SP2 (6.0.6002) -- api-ms-win-core-synch-l1-2-0.dll missing. UCRT/VC++ redist also fails (VersionNT64 condition false -- likely 32-bit OS). No legacy build exists yet (gururmm#88). [ctx: host=LAB-SERVER client=lens-auto os=server2008sp2]
2026-07-20 | Howard-Home | remediation-tool | get-token: token request failed (no access_token) [ctx: tenant=207fa277-e9d8-4eb7-ada1-1064d2221498 tier=investigator auth=secret err=7000215] 2026-07-20 | Howard-Home | remediation-tool | get-token: token request failed (no access_token) [ctx: tenant=207fa277-e9d8-4eb7-ada1-1064d2221498 tier=investigator auth=secret err=7000215]
2026-07-20 | Howard-Home | rmm | [correction] Misidentified Datto AV kernel drivers (rtp1/rtp2/rtp_elam/BdNet/BdSentry/netprotection_network_filter*) as orphan Avira/Bitdefender leftovers. Datto AV uses the Bitdefender Endpoint Protection SDK under the hood, so these drivers are signed by Avira Operations GmbH but belong to Datto AV. Disabled and deleted them, breaking Datto AV. Had to restore from the SDK backup dir. Always check C:Program Filesinfocytegentdattoav before assuming BD/Avira drivers are orphans. [ctx: ref=maintenance-pc-cascades machine=MAINTENANCE-PC] 2026-07-20 | Howard-Home | rmm | [correction] Misidentified Datto AV kernel drivers (rtp1/rtp2/rtp_elam/BdNet/BdSentry/netprotection_network_filter*) as orphan Avira/Bitdefender leftovers. Datto AV uses the Bitdefender Endpoint Protection SDK under the hood, so these drivers are signed by Avira Operations GmbH but belong to Datto AV. Disabled and deleted them, breaking Datto AV. Had to restore from the SDK backup dir. Always check C:Program Filesinfocytegentdattoav before assuming BD/Avira drivers are orphans. [ctx: ref=maintenance-pc-cascades machine=MAINTENANCE-PC]

120
wiki/clients/lens-auto-brokerage.md
View File

@@ -2,7 +2,7 @@
type: client type: client
name: lens-auto-brokerage name: lens-auto-brokerage
display_name: Len's Auto Brokerage display_name: Len's Auto Brokerage
last_compiled: 2026-06-17 last_compiled: 2026-07-20
compiled_by: HOWARD-HOME/claude-main compiled_by: HOWARD-HOME/claude-main
sources: sources:
- clients/lens-auto-brokerage/docs/overview.md - clients/lens-auto-brokerage/docs/overview.md
@@ -19,61 +19,107 @@ backlinks: []
# Len's Auto Brokerage # Len's Auto Brokerage
Auto brokerage in Tucson, AZ. Workgroup environment (no AD domain) of ~8 active Windows Auto brokerage in Tucson, AZ. 7 active Windows workstations plus one production server
endpoints plus one production server, managed by ACG. Defining current concern: a legacy (Server 2019 AD DC), managed by ACG. A legacy Windows Server 2008 box (lab-server) is
Windows Server 2008 box (lab-server) still in service and overdue for decommission, with still powered on running Deskman — the active migration project is to move Deskman data
Deskman and QuickBooks data slated to move to the new Server 2019 box. to the Server 2019 box and decommission the 2008 machine.
## Profile ## Profile
- **Contract type:** Managed — recurring monthly ($190.87/mo) plus prepaid hour block and ad-hoc project/break-fix labor - **Contract type:** Managed — recurring monthly ($190.00/mo) plus prepaid hour block and ad-hoc project/break-fix labor
- **Key contacts:** 520-247-1089, 520-318-1040 (names not in Syncro — verify). Known staff (from managed endpoints): Becky, Josh, Dawn, Madonna. - **Key contacts:** Becky Kahn (520-247-1089), Michale Haubert (520-318-1040), "Desert RV" (no phone)
- **Billing rate:** (verify — check Syncro labor line items) - **Billing email:** becky@lensautobrokerage.com
- **Hours remaining (prepaid):** 4.25 hrs as of 2026-06-17 (Syncro). Note: 11.0 block hours moved to "AT" on 2025-08-19. - **Hours remaining (prepaid):** 3.75 hrs as of 2026-07-20 (Syncro). Note: 11.0 block hours moved to "AT" on 2025-08-19.
- **Monthly recurring breakdown:** M365 Apps for Business 1x$10 + GPS basic workstations 7x$20 ($140) + GPS basic server 1x$40 = $190.00/mo
- **Syncro customer ID:** 3289131 - **Syncro customer ID:** 3289131
- **Managed devices (Syncro assets):** 15 (8 enrolled & online in GuruRMM) - **Managed devices (Syncro assets):** 15 total (9 active, 6 legacy/dead)
- **Active ticket:** None open in Syncro as of 2026-06-17 - **Open Syncro tickets (as of 2026-07-20):**
- #32363 — Credit card terminal offline since fiber upgrade (2026-06-01)
- #32299 — Brian's Chrome address bar won't search, logs out of tabs (2026-05-19)
- #32147 — Confirm data backup is in place (2026-04-13) — relevant to migration
## Infrastructure ## Infrastructure
### Servers & Services ### Servers
| Host | IP | Role | OS | Notes | | Host | IP | Role | OS | Hardware | Notes |
|---|---|---|---|---| |---|---|---|---|---|---|
| LAB-SVR (Syncro: LENS-SV; old name DESKTOP-BMBTQLI) | 192.168.1.81 | Current production server | Windows Server 2019 Std (10.0.17763) | HPE ProLiant MicroServer Gen10 Plus v2, SN 3M1D1T12PD, 16GB RAM. Server 2019 installed 2026-04-15; enrolled in GuruRMM 2026-06-01. One box, three names. Deskman + QuickBooks migration target. | | LAB-SVR | 192.168.1.82 | Production server, AD DC (LAB.lan), DNS, File Server | Windows Server 2019 Std (10.0.17763) | HPE ProLiant MicroServer Gen10 Plus v2, Xeon E-2314, 16GB RAM, SN 3M1D1T12PD | Installed 2026-04-15. Domain role = Primary Domain Controller (LAB.lan). DNS at 127.0.0.1 (self). C: 1.77TB total / 1.6TB free. Roles: AD DS, DNS, File Server, DFS. MSP360 backup installed. GuruRMM 0.6.66 (needs update to 0.6.79). NO Deskman, NO QuickBooks installed yet. |
| LAB-SERVER (lab-server) | 192.168.1.241 | OLD server — EOL, to decommission | Windows Server 2008 SP2 (6.0.6002) | HP ProLiant ML310e Gen8 v2, SN MX253500HB, Xeon E3-1220 v3. WORKGROUP. EOL since Jan 2020. Still powered; currently runs Deskman + QuickBooks. GuruRMM agent will NOT install (pre-TLS1.2 / UCRT) — decommission instead. | | LAB-SERVER | 192.168.1.241 | OLD server — EOL, to decommission | Windows Server 2008 SP2 (6.0.6002) | HP ProLiant ML310e Gen8 v2, Xeon E3-1220 v3, SN MX253500HB | EOL since Jan 2020. Still powered. Runs Deskman. NOT in GuruRMM (pre-TLS1.2). NOT in ScreenConnect. Howard working on getting RMM agent installed. |
### Managed Endpoints (GuruRMM — 8 online) **[INFO] LAB-SVR IP is 192.168.1.82 (confirmed live via RMM/SC), not .81 as previously documented.**
DESKTOP-0J55V6L (Win11 Home), DESKTOP-JDQMLCE (Win11 Pro), EV-DAWG (Win11 Pro),
Josh-Lens (Win11 Pro), LAB-Becky (Win10 Pro), LAB-DAWN (Win11 Pro), LAB-MADONNA (Win11 Pro), **[INFO] LAB-SVR is an AD Domain Controller (LAB.lan) with DNS, but NO workstation is domain-joined — all remain WORKGROUP.**
LAB-SVR (Server 2019). Offline >2mo / Syncro-removed (no action): DESKTOP-LJ825H1, LAB-005252, MATT, PARKER.
### Managed Endpoints (7 workstations, all online as of 2026-07-20)
| Host | User | OS | Hardware | IP | Domain | AV | Key Software | Printers |
|---|---|---|---|---|---|---|---|---|
| DESKTOP-0J55V6L | Brian | Win 11 Home 25H2 | Dell OptiPlex 3000, i5-12500, 16GB, SN 6YY8QT3 | .75 | WORKGROUP | Defender only | Office 2010 H&B, Chrome, Manheim Media Player. OLD: LabTech/Automate agent still running, 2x ScreenConnect instances, TeamViewer, AMD Catalyst leftovers | RICOH IM 600SR, HP OJ Pro 9010, Brother HL-L2350DW, Brother HL-L2340D ("Brian's Brother"), Tap to Sign |
| DESKTOP-JDQMLCE | localadmin (Turner) | Win 11 Pro 25H2 | Dell OptiPlex 3090, i5-10505, 16GB, SN 3RV9RN3 | .247 | WORKGROUP | Datto EDR + Avira | Chrome, HDAgent/UpAgent (Derive/SCT), Jump Desktop. No Office. PENDING REBOOT (32+ days uptime, user idle 22+ days) | Tap to Sign, RICOH IM 600SR, HP OJ Pro 9010, Brother HL-L2350DW, Brother HL-L2340D |
| EV-DAWG | Gloss | Win 11 Pro 25H2 | Dell Vostro 3710, i7-12700, 16GB, SN 9849GT3 | .200 | WORKGROUP | Datto EDR + Avira + McAfee (conflict?) | Adobe Acrobat, M365, Dell bloatware, SmartByte | RICOH IM 600SR, HP OJ Pro 9010 |
| Josh-Lens | jupsh | Win 11 Pro 25H2 | Dell Vostro 3710, i7-12700, 16GB, SN 8849GT3 | .87 | WORKGROUP | Datto EDR + Avira + McAfee WebAdvisor | M365, Chrome, Firefox, Jump Desktop, SmartByte | Brother HL-L2340D, Brother HL-L2350DW, RICOH IM 600SR, Tap to Sign |
| LAB-Becky | Becky | Win 10 Pro 22H2 | HP Desktop 460-p214 (refurb), i7-7700T, 16GB, SN 8CG8367635 | .136 | WORKGROUP | Datto EDR + Avira | **QuickBooks Enterprise 20.0 + 24.0**, M365, Adobe Acrobat, Amcrest Surveillance Pro, Intellipay V400, MSP360 backup, ZeroTier, Firefox. D: 2TB Seagate USB (1.85TB free) | RICOH IM 600SR (x2), HP OJ Pro 9010, Brother HL-L2350DW ("Tinas"), Brother HL-L2340D, Tap to Sign, ABS PDF Driver |
| LAB-DAWN | Tina | Win 11 Pro 25H2 | Dell OptiPlex SFF 7010, i5-13500, 16GB, SN FB19704 | .164 | WORKGROUP | Defender only (no Datto EDR) | M365 (multi-language: en/es/fr/pt), Adobe Acrobat, Intellipay V400, ScanSnap Home, Firefox | Brother HL-L2350DW (x2), RICOH IM 600SR, Tap to Sign |
| LAB-MADONNA | Madonna | Win 11 Pro 25H2 | Lenovo ThinkCentre neo 50t Gen 4, i5-12400, 16GB, SN GM0YBWB7 | .229 | WORKGROUP | Defender only (no Datto EDR) | Office 2010 Professional, Adobe Acrobat, Chrome, Google Drive, Firefox, ZeroTier. Shares: "Ricoh Scans" -> C:\Ricoh Scans | RICOH IM 600SR (x2 - WSD + IP .105), HP OJ Pro 9010 (x2), Brother HL-L2350DW, Tap to Sign |
### Shared Printers / Copiers
| Device | IP/Connection | Present On |
|---|---|---|
| RICOH IM 600SR (main copier) | 192.168.1.105 | All workstations |
| HP OfficeJet Pro 9010 | Various (USB/WSD) | Most workstations |
| Brother HL-L2350DW | WSD | Most workstations (labeled "Tinas" on LAB-Becky) |
| Brother HL-L2340D | USB | DESKTOP-0J55V6L ("Brian's Brother"), DESKTOP-JDQMLCE, Josh-Lens |
| Tap to Sign (virtual) | — | Most workstations |
### Network ### Network
- **ISP / WAN:** 174.77.67.237 - **ISP / WAN:** 174.77.67.237
- **LAN:** 192.168.1.0/24 - **LAN:** 192.168.1.0/24 (all workstations + LAB-SVR)
- **Domain:** None — WORKGROUP - **Gateway/Router:** 192.168.1.1 (UDM, post-fiber-upgrade)
- **DNS (workstations):** 192.168.1.1 (router, NOT LAB-SVR — AD DNS is unused by clients)
- **AD Domain:** LAB.lan (LAB-SVR is DC, but no workstations are joined)
- **RICOH copier:** 192.168.1.105
- **ZeroTier overlay:** LAB-Becky (172.29.188.151 / 192.168.193.130), LAB-MADONNA (192.168.193.234)
- **DHCP:** All endpoints on DHCP
### Anomaly: DESERTRVSERVER in Syncro
Syncro asset ID 4293650 — "DESERTRVSERVER" — is in the Lens Auto Syncro account but on a
completely different subnet (10.0.0.182, gateway 10.0.0.1), domain DESERTRV.local, running
Server 2016 Essentials with Hyper-V, 32GB RAM, WAN 38.72.66.99. This appears to be a
**Desert RV Center** asset misplaced in Len's account. Investigate and reassign.
## Access ## Access
- **Remote access:** ScreenConnect (present on endpoints; primary remote method — no AD/GPO) - **Remote access:** ScreenConnect ("LAB - Len's Auto" company tag, all 7 workstations + LAB-SVR online)
- **RDP (lab-server):** enabled 2026-04-13 (`fDenyTSConnections=0`); modern-client RDP fails with 0x800706be (CredSSP/TLS incompatibility on Server 2008) - **GuruRMM:** client `bc76984f-8dc9-42e7-b978-c8def1143144`, site "Main" `d8f69cd8-5c42-43bc-ae45-9cc6078d37fb`, enrollment code `UPPER-STAR-2820`
- **GuruRMM:** client `bc76984f-8dc9-42e7-b978-c8def1143144`, site "Main" `d8f69cd8-5c42-43bc-ae45-9cc6078d37fb`, site/enrollment code `UPPER-STAR-2820`
- **Vault path:** `clients/lens-auto-brokerage.sops.yaml` - **Vault path:** `clients/lens-auto-brokerage.sops.yaml`
- **"Swanson, Len"** — CONFIRMED SEPARATE in both RMM (client `607ab79d`, site "Home") and ScreenConnect (CP1 "Swanson, Len"). Personal machine LAS-GAMER at home (WAN 68.109.162.82). No action needed.
## Patterns & Known Issues ## Patterns & Known Issues
- **EOL Server 2008 (lab-server) still in production** — the central risk. No security updates for 6+ years; hosts Deskman + QuickBooks pending migration. GuruRMM agent cannot run on it; it is monitored only by being left until decommission. - **EOL Server 2008 (lab-server) still powered on** — runs Deskman, no RMM agent, not in ScreenConnect. The central risk and migration driver.
- **RDP to lab-server fails (0x800706be)** — CredSSP/TLS layer mismatch between modern clients and Server 2008; expect local-console or legacy security-layer work. - **AD DC running but unused** — LAB-SVR is a domain controller (LAB.lan) with DNS, DFS, File Server roles, but zero workstations are domain-joined. All are WORKGROUP with DNS pointing at the router.
- **Deskman transient update crash** — Deskman `gui.exe` (.NET) can throw `System.UnauthorizedAccessException` (CLR20r3) when opened mid-update; clears on its own once the updater finishes. If it does NOT clear, treat as a permissions/ACL issue (grant Modify on the program/data folder or relocate data to ProgramData). - **QuickBooks is on Becky's workstation, NOT the server** — Enterprise 20.0 + 24.0 on LAB-Becky with full QB services running. The old docs said QB was on the 2008 server — verify whether the server copy is still active or if Becky's is the live instance.
- **One box, three names** — LAB-SVR (GuruRMM) = LENS-SV (Syncro) = DESKTOP-BMBTQLI (old doc). Confirmed same physical server (SN 3M1D1T12PD, IP .81). Avoid re-investigating as separate machines. - **Deskman not found on ANY RMM-visible machine** — must only exist on the 2008 server (not in RMM). Need to inventory it once RMM is on lab-server or via ScreenConnect backstage.
- **"Swanson, Len" is a SEPARATE RMM client** — a personal/home account for the owner (RMM client `607ab79d`, site "Home"), distinct from this business. Do not conflate. - **AV coverage gaps** — LAB-DAWN and LAB-MADONNA have Defender only (no Datto EDR). EV-DAWG has McAfee alongside Datto EDR (potential conflict). DESKTOP-0J55V6L has no third-party AV.
- **Stale agents/software** — DESKTOP-0J55V6L still runs old LabTech/Automate agent (LTService), has 2 ScreenConnect instances, TeamViewer, AMD Catalyst leftovers. Office 2010 on Brian's and Madonna's machines.
- **DESKTOP-JDQMLCE** — 32+ day uptime, pending reboot, user idle 22+ days. Likely unused or staging machine. Tagged "Turner" in ScreenConnect.
- **LENS-SV Syncro asset is stale** — last synced Jan 2025, pre-rebuild. Should be archived.
- **LAB-SVR GuruRMM agent** at 0.6.66, fleet is on 0.6.79 — needs update.
- **Deskman transient update crash** — gui.exe (.NET) can throw UnauthorizedAccessException mid-update; self-resolves. If persistent, grant Modify on program/data folder.
- **One box, three names** — LAB-SVR (GuruRMM/SC) = LENS-SV (Syncro) = DESKTOP-BMBTQLI (old doc). SN 3M1D1T12PD, IP .82.
## Active Work ## Active Work — Server 2008 Decommission Project (Tracker #71)
- No open Syncro tickets as of 2026-06-17. - **Goal:** Migrate Deskman (and verify QuickBooks situation) off lab-server (2008) to LAB-SVR (2019), then decommission the 2008 box.
- **Open project — Deskman + QuickBooks migration** off lab-server (2008) to LAB-SVR (2019), then decommission the 2008 box. High priority (security/compliance). - **Status as of 2026-07-20:** Planning phase — gathering comprehensive inventory before executing.
- GuruRMM deployment is COMPLETE & RECONCILED (8 agents online); optional straggler catch via site walkthrough + self-installer (`UPPER-STAR-2820`). - **Howard is working on:** Getting GuruRMM agent onto lab-server (Server 2008) for inventory.
- **Open questions:** See PROJECT_STATE.md for full migration plan and decision points.
- **Related Syncro ticket:** #32147 — Confirm data backup is in place (open since 2026-04-13)
- **Prepaid hours:** 3.75 hrs — migration will likely exceed this, may need block replenishment.
## History Highlights ## History Highlights
- **2026-04-13** — Client onboarded: folder/docs created, server inventory taken, RDP enabled on lab-server; CredSSP RDP failure diagnosed; Deskman + QuickBooks migration scoped. - **2026-04-13** — Client onboarded: folder/docs created, server inventory taken, RDP enabled on lab-server; CredSSP RDP failure diagnosed; Deskman + QuickBooks migration scoped.
- **2026-04-15** — DESKTOP-BMBTQLI rebuilt as Windows Server 2019 (now LAB-SVR), becoming the production server. - **2026-04-15** — DESKTOP-BMBTQLI rebuilt as Windows Server 2019 (now LAB-SVR), becoming the production server. AD DS + DNS installed.
- **2026-06-01** — GuruRMM deployment via ScreenConnect completed and reconciled against Syncro assets (8 endpoints online). Confirmed LAB-SVR = LENS-SV = DESKTOP-BMBTQLI. lab-server confirmed un-enrollable. - **2026-06-01** — GuruRMM deployment via ScreenConnect completed and reconciled against Syncro assets (8 endpoints online).
- **2026-06-17** — Deskman crash (UnauthorizedAccessException) on lab-server reported by Becky; root-caused as transient mid-update file lock; self-resolved, no fix applied. - **2026-06-17** — Deskman crash (UnauthorizedAccessException) on lab-server reported by Becky; transient mid-update file lock; self-resolved.
- **2026-07-09** — Browser hijack cleanup on Brian's PC (DESKTOP-0J55V6L), Syncro ticket #32525, resolved.
- **2026-07-20** — Comprehensive inventory gathered from RMM/SC/Syncro for migration planning. Deskman confirmed only on 2008 box. QuickBooks confirmed on LAB-Becky (not server).
## Backlinks ## Backlinks
*(none yet)* *(none yet)*