azcomputerguru/claudetools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from GURU-5070 at 2026-06-04 09:45:37

Browse Source 
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-04 09:45:37
This commit is contained in:
Mike Swanson
2026-06-04 09:45:42 -07:00
parent 263039e21c
commit 5a78c56f36
9 changed files with 404 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files

36
wiki/clients/peaceful-spirit.md
View File

@@ -2,7 +2,7 @@
type: client
name: peaceful-spirit
display_name: Peaceful Spirit Therapeutic Massage
last_compiled: 2026-06-02
last_compiled: 2026-06-04
compiled_by: GURU-5070/claude-main
sources:
- clients/peaceful-spirit/session-logs/2026-05-10-recovered-setup-radius-authentication-for-vpn-access.md
@@ -10,6 +10,7 @@ sources:
- clients/peaceful-spirit/session-logs/2026-05-11-session.md
- clients/peaceful-spirit/session-logs/2026-05-22-session.md
- clients/peaceful-spirit/session-logs/2026-05-27-session.md
- clients/peaceful-spirit/session-logs/2026-06-04-session.md
- clients/peaceful-spirit/server.sops.yaml (vault)
- clients/peaceful-spirit/vpn.sops.yaml (vault)
backlinks:
@@ -18,7 +19,7 @@ backlinks:
# Peaceful Spirit Therapeutic Massage
Massage therapy practice with at least two sites: Country Club (primary, all work performed here) and a Northwest (NW) site. On-premises Windows Server 2016 Essentials domain environment. Domain-joined workstations for Mara (owner/operator) and other staff. L2TP/IPsec VPN fully deployed to all known machines as of 2026-05-27.
Massage therapy practice with at least two sites: Country Club (primary, all work performed here) and a Northwest (NW) site. On-premises Windows Server 2016 Essentials domain environment. Domain-joined workstations for Mara (owner/operator) and other staff. L2TP/IPsec VPN fully deployed to all known machines as of 2026-05-27. Site-wide VPN outage occurred 2026-06-04 due to UDR Ultra reboot dropping VPN port-forward — resolved same day by re-adding UDP 500/4500 -> 192.168.0.2 in UniFi controller.
---
@@ -40,8 +41,8 @@ Massage therapy practice with at least two sites: Country Club (primary, all wor
| Host | IP | Role | OS | Notes |
|---|---|---|---|---|
| PST-SERVER | 192.168.0.2 | DC, DNS, RRAS (L2TP/IPsec VPN), NPS, Enterprise Root CA (AD CS) | Windows Server 2016 Essentials (build 14393) | GuruRMM agent ID: `6b6106a7-8515-4b6b-857d-0dc6ede53f35`. Win32-OpenSSH installed 2026-05-11 (`C:\Program Files\OpenSSH\OpenSSH-Win64\`). Machine cert: `DB71981ABE4CBA1DE96FEEEAF178F6259663B543` (CN=PST-SERVER.PEACEFULSPIRIT.local, valid 5/9/2027). |
| UCG-PST-CC | 192.168.0.10 (LAN) / 98.190.129.150 (WAN) | UniFi Cloud Gateway — perimeter router + DNAT for VPN | UniFi OS | SSH: `root@192.168.0.10` via key `~/.ssh/pst-cc-ucg` (password-auth is keyboard-interactive; password: vault). WAN SSH (98.190.129.150:22) is NOT accessible remotely — timed out from all tested sources. UCG VPN (strongSwan/xl2tpd) abandoned 2026-05-22 in favor of RRAS on PST-SERVER. DNAT persistence: `/data/on_boot.d/10-vpn-portforward.sh`. |
| PST-SERVER | 192.168.0.2 | DC, DNS, RRAS (L2TP/IPsec VPN), NPS, Enterprise Root CA (AD CS) | Windows Server 2016 Essentials (build 14393) | GuruRMM agent ID: `87293069-33b6-45e8-a68f-6811216cdb96` (v0.6.52, confirmed 2026-06-04; prior ID `6b6106a7-8515-4b6b-857d-0dc6ede53f35` is retired/re-enrolled). Win32-OpenSSH installed 2026-05-11 (`C:\Program Files\OpenSSH\OpenSSH-Win64\`). Machine cert: `DB71981ABE4CBA1DE96FEEEAF178F6259663B543` (CN=PST-SERVER.PEACEFULSPIRIT.local, valid 5/9/2027). 30-day uptime confirmed 2026-06-04 (no reboot during VPN outage). |
| UCG-PST-CC | 192.168.0.10 (LAN) / 98.190.129.150 (WAN) | UniFi Cloud Gateway Ultra (UDR Ultra) — perimeter router + DNAT for VPN | UniFi OS 5.1.15, kernel 5.4.213-ui-ipq5322 (aarch64) | SSH: `root@192.168.0.10` via key `~/.ssh/pst-cc-ucg` (password-auth is keyboard-interactive; password: vault). WAN SSH (98.190.129.150:22) is NOT accessible remotely — timed out from all tested sources; LAN SSH reachable via PST-SERVER jump. UCG VPN (strongSwan/xl2tpd) abandoned 2026-05-22 in favor of RRAS on PST-SERVER. DNAT persistence: `/data/on_boot.d/10-vpn-portforward.sh`. NOTE: Rebooted 2026-06-04 03:59 and dropped the VPN port-forward (see Known Issues). Port-forward re-added in UniFi controller by Mike 2026-06-04. UniFi OS 5.1.15 stores port-forward rules in a migrated schema — legacy Mongo collections read 0; use the controller UI as authoritative. |
**Note:** An NW (Northwest) site exists with a separate UCG that previously had an OpenVPN server at 64.139.88.249:1194 (TCP). No further NW site details are documented.
@@ -75,10 +76,10 @@ Massage therapy practice with at least two sites: Country Club (primary, all wor
| Machine | Role | GuruRMM Agent ID | Notes |
|---|---|---|---|
| MaraHomeNew | Mara's home desktop | `c778b6a3-c646-4454-a065-8c8bdcb1578e` | Domain-joined. VPN working (confirmed via rasdial 2026-05-11). Machine cert installed (D067E07B, CN=MaraHomeNew.PEACEFULSPIRIT.local, valid to 5/10/2027). Connects as pst-admin. |
| MaraHomeNew | Mara's home desktop | `e9645594-6d7c-4c97-8cb4-920cb5d06c8e` (v0.6.52, confirmed 2026-06-04; prior ID `c778b6a3-c646-4454-a065-8c8bdcb1578e` retired) | Domain-joined. VPN working (confirmed via rasdial 2026-05-11; IPsec link established 2026-06-04 post-fix). Machine cert installed (D067E07B, CN=MaraHomeNew.PEACEFULSPIRIT.local, valid to 5/10/2027). Connects as pst-admin. |
| Maras-HP-Laptop | Mara's HP laptop | `13cb3629-5043-4bd6-b977-6968eeccf804` | Domain-joined. VPN deployed 2026-05-22 (PSK set on-site by Mike). OneDrive per-machine deployed 2026-05-11. pst-admin profile wiped and rebuilt 2026-05-11. Connects as pst-admin. |
| PST-SURFACE | Surface device | `4a993b61-59b3-42f4-bdb5-d4362941f7d6` | Domain-joined. VPN deployed 2026-05-22 (PSK set on-site by Mike). Connects as pst-admin. |
| BridgettePSHomeComputer | Bridgette's home PC | `074141d7-bd96-49ff-8f64-edf31159c00b` | Domain-joined. VPN deployed remotely 2026-05-27 via GuruRMM `user_session`. Connects as BridgetteSH (SSO). Logon scheduled task `Connect Peaceful Spirit VPN` auto-connects ~20s after sign-in. NAT-T key was missing — set and rebooted 2026-05-27. |
| BridgettePSHomeComputer | Bridgette's home PC | `01160fc8-4c2e-4e47-a591-e4e0f9ba5ea7` (v0.6.49, re-enrolled 2026-06-04; old UUID `074141d7-bd96-49ff-8f64-edf31159c00b` is dead/offline) | Domain-joined. VPN deployed remotely 2026-05-27 via GuruRMM `user_session`. Connects as BridgetteSH (SSO). Logon scheduled task `Connect Peaceful Spirit VPN` auto-connects ~20s after sign-in. NAT-T key was missing — set and rebooted 2026-05-27. Got VPN IP 192.168.0.242 after 2026-06-04 port-forward fix (event 20224 link established). |
---
@@ -93,11 +94,11 @@ Massage therapy practice with at least two sites: Country Club (primary, all wor
| Host | Agent ID | Enrolled | Last Known Status |
|---|---|---|---|
| PST-SERVER | `6b6106a7-8515-4b6b-857d-0dc6ede53f35` | 2026-05-10 23:19 UTC | Active (2026-05-11 01:29 UTC) |
| MaraHomeNew | `c778b6a3-c646-4454-a065-8c8bdcb1578e` | [unverified date] | — |
| PST-SERVER | `87293069-33b6-45e8-a68f-6811216cdb96` (v0.6.52) | [re-enrolled; prior `6b6106a7...` retired] | Active — confirmed 2026-06-04 |
| MaraHomeNew | `e9645594-6d7c-4c97-8cb4-920cb5d06c8e` (v0.6.52) | [re-enrolled; prior `c778b6a3...` retired] | Active — confirmed 2026-06-04 |
| Maras-HP-Laptop | `13cb3629-5043-4bd6-b977-6968eeccf804` | [unverified date] | — |
| PST-SURFACE | `4a993b61-59b3-42f4-bdb5-d4362941f7d6` | [unverified date] | — |
| BridgettePSHomeComputer | `074141d7-bd96-49ff-8f64-edf31159c00b` | 2026-05-27 | Confirmed active 2026-05-27 |
| BridgettePSHomeComputer | `01160fc8-4c2e-4e47-a591-e4e0f9ba5ea7` (v0.6.49) | Re-enrolled 2026-06-04 (old `074141d7...` dead/offline) | Active — confirmed 2026-06-04 |
---
@@ -108,7 +109,7 @@ Massage therapy practice with at least two sites: Country Club (primary, all wor
- **GuruRMM (external):** https://rmm.azcomputerguru.com
- **Vault paths:**
- `clients/peaceful-spirit/server.sops.yaml` — PST-SERVER credentials (sysadmin) and UCG details (root, keyboard-interactive); raw secrets live in the vault entry, not here. Created during the 2026-05-10 recovered session.
- `clients/peaceful-spirit/vpn.sops.yaml` — VPN PSK, pst-admin credentials, network details. Note: pst-admin password updated to SpiritWalk26! on 2026-05-22 — vault entry needs updating.
- `clients/peaceful-spirit/vpn.sops.yaml` — VPN PSK (z5zkNBds2V9eIkdey09Zm6Khil3DAZs8, confirmed 2026-06-04 matches server), pst-admin credentials, network details. [WARNING] VAULT DRIFT: vault lists pst-admin password as `24Hearts$` but wiki records a reset to `SpiritWalk26!` on 2026-05-22 — needs reconciliation (verify with Mara, update whichever is stale).
---
@@ -118,7 +119,8 @@ Massage therapy practice with at least two sites: Country Club (primary, all wor
- **NRPT instead of VPN DNS suffix push.** `Add-VpnConnectionTriggerDnsConfiguration` fails for AllUserConnection profiles. Use `Add-DnsClientNrptRule -Namespace ".peacefulspirit.local" -NameServers "192.168.0.2"` instead.
- **cmdkey as SYSTEM for pre-login credential persistence.** Machine credential store entries (cmdkey in SYSTEM context) are available at the Windows login screen; per-user cmdkey entries are not.
- **Stale hosts file.** During 2026-05-22 on-site, MaraHomeNew (and likely other machines) had a stale hosts entry mapping PST-SERVER to 72.194.62.5 (Mara's router's bogus DNS response). This caused name resolution failures even with VPN up. A GuruRMM cleanup script was deployed; verify no residual entries if name resolution issues recur. The hosts-file path encoding bug (`driverstc` artifact) means the cleanup script may not have fully run on all machines.
- **UCG iptables DNAT required — UniFi Traffic Rules are firewall-allow only, NOT DNAT.** Port-forward rules must be placed via CLI in `/data/on_boot.d/10-vpn-portforward.sh` for persistence across reboots.
- **UDR Ultra reboot can silently drop the VPN port-forward (site-wide outage risk).** Confirmed 2026-06-04: the UDR Ultra (UCG-PST-CC) rebooted at 03:59 and came back without the UDP 500/4500 -> 192.168.0.2 port-forward, taking the entire site VPN offline with error 789 (IKE packets silently dropped at the edge). The `/data/on_boot.d/10-vpn-portforward.sh` persistence script was present but the UniFi OS 5.1.15 controller schema migration appears to have superseded it. **After any site-wide error 789, check the UDR port-forward in the UniFi controller FIRST** — IPsec auditing on the server (zero IKE events) is the confirmatory test. Long-term open items: (1) verify the re-added rule persists across a deliberate reboot (possible firmware bug or uncommitted rule), (2) add a DDNS hostname so the hardcoded 98.190.129.150 in client profiles is not a single point of failure for a Cox WAN-IP change.
- **UCG iptables DNAT required — UniFi Traffic Rules are firewall-allow only, NOT DNAT.** Port-forward rules must be managed via the UniFi controller UI; `/data/on_boot.d/10-vpn-portforward.sh` is a legacy CLI fallback and may not persist reliably on UniFi OS 5.1.15+ (see above). Always verify iptables live after a reboot.
- **UCG SSH unreachable from office WAN.** All remote UCG administration must go through GuruRMM (for PST-SERVER) or the UniFi cloud portal (for UCG itself). LAN SSH (192.168.0.10) requires keyboard-interactive auth — password auth via plink fails; use paramiko with kb_handler or interactive terminal.
- **GuruRMM PowerShell invocation quirk.** Running `command_type: powershell` fails on PST machines with "-OutputEncoding is not recognized." Use `command_type: cmd` and call `powershell.exe` explicitly within the script body.
- **Machine cert template (PEACEFULSPIRIT-PST-SERVER-CA / Machine template).** `msPKI-Certificate-Name-Flag` was changed from `0x18000000` to `0x1` (ENROLLEE_SUPPLIES_SUBJECT) on 2026-05-11. This is a domain-wide template change. New machine certs will use the CSR Subject/SAN rather than the submitting machine's AD DNS identity. RRAS UserAuthProtocolAccepted now includes Certificate (added 2026-05-11).
@@ -132,16 +134,19 @@ Massage therapy practice with at least two sites: Country Club (primary, all wor
## Active Work
As of 2026-05-27 session end:
As of 2026-06-04 session end:
- **VPN rollout: COMPLETE.** All four machines (MaraHomeNew, Maras-HP-Laptop, PST-SURFACE, BridgettePSHomeComputer) have working L2TP/IPsec VPN.
- **Vault update needed:** pst-admin password was reset to SpiritWalk26! on 2026-05-22; vault entry `clients/peaceful-spirit/vpn.sops.yaml` needs updating. (2026-05-27 session confirmed no SOPS entry existed for PSK/pst-admin at that time — secrets only in session logs.)
- **VPN rollout: COMPLETE.** All four machines (MaraHomeNew, Maras-HP-Laptop, PST-SURFACE, BridgettePSHomeComputer) have working L2TP/IPsec VPN. 2026-06-04 site-wide outage (UDR reboot) confirmed resolved: Bridgette connected (192.168.0.242), Mara IPsec established.
- **[OPEN] UDR port-forward reboot-persistence test:** Confirm the re-added UDP 500/4500 -> 192.168.0.2 rule survives a deliberate UDR reboot. The prior rule vanished on the 2026-06-04 03:59 reboot — may be a firmware bug or an uncommitted rule. If it doesn't persist, re-examine `/data/on_boot.d/10-vpn-portforward.sh` or escalate to UniFi.
- **[OPEN] DDNS for VPN endpoint:** Client profiles hardcode 98.190.129.150 (Cox WAN). A DDNS hostname would prevent a site-wide VPN breakage on a Cox IP change. Deferred — low urgency but document path.
- **[OPEN] Vault drift — pst-admin password:** `vpn.sops.yaml` lists `24Hearts$`; wiki records reset to `SpiritWalk26!` on 2026-05-22. Reconcile: verify current password with Mara, update vault to match.
- **[OPEN] Syncro ticket #32271 update:** Resolution + 1hr warranty labor for 2026-06-04 outage (per session log, in progress at session end).
- **Parity decision deferred:** Mara's 3 machines connect as shared `pst-admin`; BridgetteSH connects as her own domain account via SSO. Consider aligning all to per-user auth (cleaner audit trail) or aligning Bridgette to `pst-admin`.
- **Pre-login VPN verification:** Confirmed working on MaraHomeNew via rasdial. Maras-HP-Laptop and PST-SURFACE need verification at the Windows login screen specifically.
- **Hosts file cleanup verification:** The GuruRMM cleanup script had a path encoding bug (`driverstc` instead of `drivers\etc`) — DNS was flushed but hosts entries may not have been removed on all machines. Verify if name resolution issues recur.
- **PST-SERVER temp file cleanup:** `C:\ProgramData\`: gen_certs.ps1, fix_acl.ps1, acl_result.txt, verify_acl.ps1, acl_verify.txt, and all *.inf, *.req, *.cer, *.pfx files. Also remove temporary firewall rules TEMP-CertEnroll-RPC (TCP 135) and TEMP-CertEnroll-DCOM (TCP 49152-65535).
- **Machine cert VPN path (IKEv2) — deferred.** Machine certs were generated for MaraHomeNew (D067E07B), Maras-HP-Laptop (4CADDE8F, CA RequestId 66), and PST-SURFACE (197FF22A, CA RequestId 67) and PFXs (password: PstVpn2026!) were created. This IKEv2 machine-cert approach was superseded by the L2TP/RRAS decision on 2026-05-22. The certs and PFXs remain on PST-SERVER and DESKTOP-0O8A1RL — determine if IKEv2 path should be completed, abandoned, or the certs revoked.
- **Auto-connect task on BridgettePSHomeComputer:** Validated via `Start-ScheduledTask`; not yet observed through an actual sign-in cycle.
- **Auto-connect task on BridgettePSHomeComputer:** Validated via `Start-ScheduledTask`; Bridgette fully connected 2026-06-04 (logon-task path confirmed end-to-end during outage resolution).
---
@@ -158,6 +163,7 @@ As of 2026-05-27 session end:
| 2026-05-22 | L2TP/IPsec VPN successfully deployed to MaraHomeNew, Maras-HP-Laptop, PST-SURFACE during on-site visit at Mara's house. UCG-hosted strongSwan/xl2tpd abandoned; RRAS on PST-SERVER became the VPN endpoint. UCG DNAT rules created for UDP 500/4500/ESP. Stale hosts file entries removed. pst-admin and mara passwords reset to SpiritWalk26!. BridgettePSHomeComputer offline — VPN pending. |
| 2026-05-27 | BridgettePSHomeComputer VPN deployed fully remotely via GuruRMM `user_session` context (no on-site visit). L2TP PSK set remotely. BridgetteSH added to WseRemoteAccessUsers and granted msNPAllowDialin. Logon scheduled task created for auto-connect. VPN rollout complete across all four machines. |
| 2026-06-01 | Crashed 2026-05-10 session transcript (9700a3c6) recovered by the auto-reconstructor. Primary-source log saved as `clients/peaceful-spirit/session-logs/2026-05-10-recovered-setup-radius-authentication-for-vpn-access.md`, cross-linked with the manual `2026-05-10-session.md`. Covers UCG SSH key generation, paramiko tunneling, RADIUS/NPS extraction, and vault `server.sops.yaml` creation. |
| 2026-06-04 | Site-wide VPN outage: UDR Ultra (UCG-PST-CC) rebooted at 03:59 and returned without UDP 500/4500 -> 192.168.0.2 port-forward. All clients failed RAS error 789 (IPsec pre-auth, zero IKE packets reaching server). RRAS/PST-SERVER confirmed healthy (30-day uptime, services up, PSK correct). Root cause isolated to missing DNAT rule via IPsec auditing (zero IKE events on live dial). Mike re-added port-forward in UniFi controller. Bridgette connected (192.168.0.242, event 20224); Mara IPsec established. BridgettePSHomeComputer re-enrolled in GuruRMM (new UUID 01160fc8, old 074141d7 dead). PST-SERVER agent UUID confirmed 87293069; MaraHomeNew agent UUID confirmed e9645594. |
---

6
wiki/index.md
View File

@@ -1,7 +1,7 @@
# Wiki Index
Last updated: 2026-06-04
Compiled by: GURU-BEAST-ROG/claude-main
Compiled by: GURU-5070/claude-main
This wiki is LLM-maintained. Do not edit articles manually — run `/wiki-compile` to update.
Run `/wiki-lint` to check for stale entries and broken backlinks.
@@ -29,7 +29,7 @@ Run `/wiki-lint` to check for stale entries and broken backlinks.
| [Grabb & Durando Law Office](clients/grabb-durando.md) | Personal injury law firm; GND-SERVER GuruRMM enrolled; AI demand review app scoped ($4K–$7K); website migration pending; plaintext DB password in README needs vaulting | 2026-05-24 |
| [Pavon](clients/pavon.md) | Former/archive client; GeoVision NVR surveillance; OwnCloud at 172.16.3.22 backed by Uranus; cron stacking fixed; Nextcloud migration deferred 3–6 months | 2026-05-24 |
| [Rednour Law Offices](clients/rednour.md) | Law firm; M365 rednourlaw.com (tenant 4a4ca18a) fully onboarded 2026-05-31; all 5 ComputerGuru SPs consented; no MDE license; 3 workstations GuruRMM enrolled (FRONTDESKRECEPT/LEGALASST/REDNOURCARRIEVI); Carla Skinner renamed from Emma; prior MSP agents (ScreenConnect/Splashtop/Datto) still present; shared-drive access for Nick Pafford deferred | 2026-06-02 |
| [Peaceful Spirit Therapeutic Massage](clients/peaceful-spirit.md) | Massage therapy practice; PST-SERVER (192.168.0.2) + 5 GuruRMM agents; L2TP/IPsec RRAS VPN complete across all machines; Syncro 278525 (Peaceful Spirit Massage) | 2026-06-02 |
| [Peaceful Spirit Therapeutic Massage](clients/peaceful-spirit.md) | Massage therapy practice; PST-SERVER (192.168.0.2) + 5 GuruRMM agents; L2TP/IPsec RRAS VPN complete; 2026-06-04 site-wide outage resolved (UDR Ultra reboot dropped VPN port-forward, re-added in controller); BridgettePSHomeComputer re-enrolled (new UUID 01160fc8); vault drift open (pst-admin password); Syncro 278525 (Peaceful Spirit Massage) | 2026-06-04 |
| [Sombra Residential LLC](clients/sombra-residential.md) | Property management; Server2013 (actually WS2012 EOL, unpatched) + DESKTOP-UQRN4K3 GuruRMM enrolled; Transwiz migration artifacts cause Office credential prompts | 2026-05-24 |
| [Stamback Septic](clients/stamback-septic.md) | Septic services; prepaid block ~3.5 hrs remaining; DESKTOP-BTR2AM3 + StambackLaptopNew GuruRMM enrolled; OneDrive identity wipe pattern documented | 2026-05-24 |
| [BG Builders LLC](clients/bg-builders.md) | Construction; M365 bgbuildersllc.com (CIPP: sonorangreenllc.com); terminated employee (Lesley Roth) — account disabled, litigation hold, device wipes pending; no Intune | 2026-05-24 |
@@ -92,7 +92,7 @@ Run `/wiki-lint` to check for stale entries and broken backlinks.
| Glaz-Tech Industries | M365, ~200 users, 9 locations; WWW (192.168.8.72 / 65.113.52.88, IIS 10 / .NET 4.8, GuruRMM agent 455a1bc7); SQL backend (192.168.8.62,3436); CyberSource REST (PNC merchant) | GuruRMM (WWW agent enrolled) |
| Grabb & Durando Law Office | GND-SERVER (WS2019, GuruRMM enrolled) | GuruRMM; AI demand review app (scoped) |
| Pavon | OwnCloud VM (172.16.3.22), Uranus /Archive storage | — |
| Peaceful Spirit | PST-SERVER (192.168.0.2, GuruRMM enrolled), UCG (98.190.129.150) | GuruRMM |
| Peaceful Spirit | PST-SERVER (192.168.0.2, agent 87293069), UCG-PST-CC UDR Ultra (192.168.0.10 / 98.190.129.150), 4 workstations | GuruRMM |
| Sombra Residential LLC | Server2013 (WS2012 EOL) + DESKTOP-UQRN4K3, GuruRMM enrolled | GuruRMM |
| Stamback Septic | DESKTOP-BTR2AM3 + StambackLaptopNew, GuruRMM enrolled | GuruRMM |
| BG Builders LLC | M365 bgbuildersllc.com; no on-prem infra documented | — |