sync: auto-sync from GURU-5070 at 2026-07-02 19:14:01
Author: Mike Swanson Machine: GURU-5070 Timestamp: 2026-07-02 19:14:01
This commit is contained in:
61
.gmeta.json
Normal file
61
.gmeta.json
Normal file
@@ -0,0 +1,61 @@
|
||||
{
|
||||
"files": [
|
||||
{
|
||||
"accountId": "46f69bc61163",
|
||||
"action": "upload",
|
||||
"bucketId": "b4268f56790bccc671010613",
|
||||
"contentLength": 65,
|
||||
"contentMd5": "1069d382847b00b2dc13d63d41d2438e",
|
||||
"contentSha1": "b40bc18e3b92e6b729efe7e43df4d59e691a7c50",
|
||||
"contentType": "application/octet-stream",
|
||||
"fileId": "4_zb4268f56790bccc671010613_f115e8a7fc62aea47_d20231212_m183630_c001_v0001144_t0059_u01702406190271",
|
||||
"fileInfo": {},
|
||||
"fileName": "MBS-20e00bf6-56ce-479d-a26c-ca7131df8b3e/CBB_LAB-BECKY/CBB_Archive/0482a28e-e682-4463-9ac0-75da5244d5c3/GEN-000000-995a0552-b4a4-4a2e-acb7-fee65f98144a/$GMETA$1-2$H4sIAAAAAAAA~22MTwuCMBjGv8tzlqFlTXarqEsRQlDQTXTWaO6V10WY-N1beOnQ-fdnwNaV3LfekIMasLI3YuPvDRSO5DQi7HV~Mm",
|
||||
"fileRetention": {
|
||||
"isClientAuthorizedToRead": true,
|
||||
"value": {
|
||||
"mode": null,
|
||||
"retainUntilTimestamp": null
|
||||
}
|
||||
},
|
||||
"legalHold": {
|
||||
"isClientAuthorizedToRead": true,
|
||||
"value": null
|
||||
},
|
||||
"serverSideEncryption": {
|
||||
"algorithm": null,
|
||||
"mode": null
|
||||
},
|
||||
"uploadTimestamp": 1702406190271
|
||||
},
|
||||
{
|
||||
"accountId": "46f69bc61163",
|
||||
"action": "upload",
|
||||
"bucketId": "b4268f56790bccc671010613",
|
||||
"contentLength": 65,
|
||||
"contentMd5": "eaef90699ad65422e9fbc6c29c085894",
|
||||
"contentSha1": "bc4d8c339c2777ba2024ce9b783c382217e28026",
|
||||
"contentType": "application/octet-stream",
|
||||
"fileId": "4_zb4268f56790bccc671010613_f115e8a7fc62aea4c_d20231212_m183631_c001_v0001144_t0006_u01702406191090",
|
||||
"fileInfo": {},
|
||||
"fileName": "MBS-20e00bf6-56ce-479d-a26c-ca7131df8b3e/CBB_LAB-BECKY/CBB_Archive/0482a28e-e682-4463-9ac0-75da5244d5c3/GEN-000000-995a0552-b4a4-4a2e-acb7-fee65f98144a/$GMETA$2-2$8NFY8RNtS0rLvuj364pgjG2lL5mIIkTrOFXEbIbeFr4u~0YlxFry58c6bqWfqz5ukGKTKRiCSVAe6CXfywuZhh~ABLTaOvrQAAAA__",
|
||||
"fileRetention": {
|
||||
"isClientAuthorizedToRead": true,
|
||||
"value": {
|
||||
"mode": null,
|
||||
"retainUntilTimestamp": null
|
||||
}
|
||||
},
|
||||
"legalHold": {
|
||||
"isClientAuthorizedToRead": true,
|
||||
"value": null
|
||||
},
|
||||
"serverSideEncryption": {
|
||||
"algorithm": null,
|
||||
"mode": null
|
||||
},
|
||||
"uploadTimestamp": 1702406191090
|
||||
}
|
||||
],
|
||||
"nextFileName": null
|
||||
}
|
||||
11911
.labbecky-report.html
Normal file
11911
.labbecky-report.html
Normal file
File diff suppressed because it is too large
Load Diff
33
.rep.json
Normal file
33
.rep.json
Normal file
@@ -0,0 +1,33 @@
|
||||
{
|
||||
"files": [
|
||||
{
|
||||
"accountId": "46f69bc61163",
|
||||
"action": "upload",
|
||||
"bucketId": "b4268f56790bccc671010613",
|
||||
"contentLength": 1004388,
|
||||
"contentMd5": "ef8028324fd12d1d167d6953c169bd38",
|
||||
"contentSha1": "b5073533132705571d07f991faaf2eea2bad4207",
|
||||
"contentType": "text/html",
|
||||
"fileId": "4_zb4268f56790bccc671010613_f111d209255e49909_d20231212_m194746_c001_v0001117_t0012_u01702410466229",
|
||||
"fileInfo": {},
|
||||
"fileName": "MBS-20e00bf6-56ce-479d-a26c-ca7131df8b3e/CBB_LAB-BECKY/CBB_Report/0482a28e-e682-4463-9ac0-75da5244d5c3.html$/20231212194744/0482a28e-e682-4463-9ac0-75da5244d5c3.html",
|
||||
"fileRetention": {
|
||||
"isClientAuthorizedToRead": true,
|
||||
"value": {
|
||||
"mode": null,
|
||||
"retainUntilTimestamp": null
|
||||
}
|
||||
},
|
||||
"legalHold": {
|
||||
"isClientAuthorizedToRead": true,
|
||||
"value": null
|
||||
},
|
||||
"serverSideEncryption": {
|
||||
"algorithm": null,
|
||||
"mode": null
|
||||
},
|
||||
"uploadTimestamp": 1702410466229
|
||||
}
|
||||
],
|
||||
"nextFileName": "MBS-20e00bf6-56ce-479d-a26c-ca7131df8b3e/CBB_LAB-BECKY/CBB_Report/0482a28e-e682-4463-9ac0-75da5244d5c3.html$/20231212194744/0482a28e-e682-4463-9ac0-75da5244d5c3.html "
|
||||
}
|
||||
@@ -0,0 +1,97 @@
|
||||
# Donor Services: Datto vs SharePoint full comparison - 2026-07-02
|
||||
|
||||
Method: full inventory both sides compared on ACG-DWP-X-BB (path+size, case-insensitive).
|
||||
Datto tree: C:\Users\Public\Desktop\Datto Workplace Server Projects\Donor Services (synced today after service restart).
|
||||
SP: sites/DonorServices Documents drive via Graph delta.
|
||||
|
||||
## Totals
|
||||
|
||||
- Datto files: 57,329
|
||||
- SharePoint files: 57,532
|
||||
- Datto-only (missing from SP): 74 -> see list below
|
||||
- SP-only (not in Datto): 277 (271 = this week's new donor-file work; 4 = Shift Coms SP-native; expected - Datto frozen 6/27)
|
||||
- Size mismatches: 838 - ALL 838 have SP larger; 814/838 are .docx -> SharePoint Office property-promotion metadata injection (content-harmless), not corruption
|
||||
|
||||
## Interpretation
|
||||
|
||||
The 6/27 reconcile hit 0-missing, then the mirror froze while staff kept working IN SharePoint.
|
||||
The 74 Datto-only files decompose as: (a) 3 post-freeze Datto deposits (2 donor scans 6/29 + 1 HR PDF 6/30, confirmed absent from SP; the 7/1 FDA form IS in SP), (b) old-name copies of records staff renamed/moved in SP during record review (e.g. RecordReviewChecklist.Incomplete -> completed renames), (c) possible SP deletions this week (full-delta cannot see deletions - verify against SP recycle bin if needed).
|
||||
|
||||
Detail files on ACG-DWP-X-BB: C:\GuruCompare\{datto-only.txt, sp-only.txt, size-diff.txt}
|
||||
|
||||
## Datto-only files (74)
|
||||
|
||||
- donor files/donor files 2025/donor scan upload folder 2025/19881024_26-06048.pdf
|
||||
- donor files/donor files 2025/donor scan upload folder 2025/26-06047 prenatals.pdf
|
||||
- donor files/donor files 2026/02- february 2026/ctmc/26-02328/26-02328 - copy.pdf
|
||||
- donor files/donor files 2026/02- february 2026/oprmc/26-02040/26-02040.recordreviewchecklist.incomplete_001.pdf
|
||||
- donor files/donor files 2026/03-march 2026/ctmc/26-03314/corrections/26-03314-1.pdf
|
||||
- donor files/donor files 2026/03-march 2026/ctmc/26-03328/26-03328.pdf
|
||||
- donor files/donor files 2026/03-march 2026/omc/26-03107/26-03107.biolife recovery.pdf
|
||||
- donor files/donor files 2026/03-march 2026/omc/26-03111/26-03111.biolife recovery.pdf
|
||||
- donor files/donor files 2026/03-march 2026/oprmc/26-03011/26-03011.biolife recovery.pdf
|
||||
- donor files/donor files 2026/03-march 2026/oprmc/26-03055/26-03055.biolife recovery.pdf
|
||||
- donor files/donor files 2026/04-april 2026/ctmc/26-04321/26-04321.biolife recovery.pdf
|
||||
- donor files/donor files 2026/04-april 2026/ctmc/26-04328/26-04328.pdf
|
||||
- donor files/donor files 2026/04-april 2026/ctmc/26-04329/26-04329.pdf
|
||||
- donor files/donor files 2026/04-april 2026/ctmc/26-04330/26-04330.updates.pdf
|
||||
- donor files/donor files 2026/04-april 2026/ctmc/26-04331/26-04331.pdf
|
||||
- donor files/donor files 2026/04-april 2026/ctmc/26-04332/26-04332.pdf
|
||||
- donor files/donor files 2026/04-april 2026/ctmc/26-04333/26-04333.pdf
|
||||
- donor files/donor files 2026/04-april 2026/mmc/26-04206/26-04206.biolife recovery.pdf
|
||||
- donor files/donor files 2026/04-april 2026/mmc/26-04206/26-04206.pdf
|
||||
- donor files/donor files 2026/04-april 2026/mmc/26-04213/26-04213.pdf
|
||||
- donor files/donor files 2026/04-april 2026/mmc/26-04215/26-04215.pdf
|
||||
- donor files/donor files 2026/04-april 2026/mmc/26-04216/26-04216.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04102/26-04102.recordreviewchecklist.incomplete .pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04104/26-04104.recordreviewchecklist.incomplete .pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04108/26-04108.recordreviewchecklist.incomplete .pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04117/26-04117.biolife recovery.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04122/26-04122.biolife recovery.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04134/26-04134.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04135/26-04135.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04136/26-04136.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04137/26-04137.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04138/26-04138.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04139/26-04139.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04140/26-04140.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04141/26-04141.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04142/26-04142.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04143/26-04143.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04144/26-04144.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04145/26-04145.pdf
|
||||
- donor files/donor files 2026/04-april 2026/omc/26-04146/26-04146.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04033/26-04033.recordreviewchecklist.incomplete .pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04040/26-04040.biolife recovery.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04046/26-04046.biolife recovery.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04052/26-04052.biolife recovery.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04053/26-04053.biolife recovery.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04067/26-04067.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04068/26-04068.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04069/26-04069.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04070/26-04070.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04071/26-04071.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04072/26-04072.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04074/26-04074.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04075/26-04075.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04076/26-04076.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04077/26-04077.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04078/26-04078.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04079/26-04079.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04080/26-04080.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04081/26-04081.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04084/26-04084.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04086/26-04086.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04088/26-04088.pdf
|
||||
- donor files/donor files 2026/04-april 2026/oprmc/26-04089/26-04089.pdf
|
||||
- donor files/donor files 2026/05-may 2026/ctmc/26-05300/26-05300.pdf
|
||||
- donor files/donor files 2026/05-may 2026/ctmc/26-05300/26-05300.recordreviewchecklist.incomplete.pdf
|
||||
- donor files/donor files 2026/05-may 2026/ctmc/26-05301/26-05301.pdf
|
||||
- donor files/donor files 2026/05-may 2026/ctmc/26-05320/26-05320.recordreviewchecklist.incomplete.pdf
|
||||
- donor files/donor files 2026/06-june 2026/ctmc/26-06303/26-06303.recordreviewchecklist.incomplete.pdf
|
||||
- donor files/donor files 2026/06-june 2026/mmc/26-06202/26-06202.saline.coc.pdf
|
||||
- donor files/donor files 2026/06-june 2026/mmc/26-06215/26-06215.recordreviewchecklist.incomplete.pdf
|
||||
- donor files/donor files 2026/06-june 2026/omc/26-06118/26-06118.recordreviewchecklist.incomplete.pdf
|
||||
- donor files/donor files 2026/06-june 2026/omc/26-06125/26-06125.recordreviewchecklist.incomplete.pdf
|
||||
- donor files/donor files 2026/06-june 2026/oprmc/26-06022/infectious disease/26-06022.positive serology result notification for processors.cfl.pdf
|
||||
- donor files/donor files 2026/06-june 2026/oprmc/26-06033/26-06033.recordreviewchecklist.incomplete.pdf
|
||||
@@ -161,6 +161,33 @@ ACL root is `G:\Shares\Scanned`; permissions inherit to `@Clients` and subdirect
|
||||
|
||||
**Caveat:** the `(D,DC)` deny on Admin1 also blocks rename and app save patterns that delete-then-write. If Admin1 users report inability to rename or save, carve an individual exception. Reversal: `Add-ADGroupMember Admin1 -Members Admin2`; `icacls "G:\Shares\Scanned" /remove:d "PEACEFULSPIRIT\Admin1"` then restore allow via `/grant`.
|
||||
|
||||
### 2025 Crash & File Corruption (investigated 2026-07-02)
|
||||
|
||||
June 4, 2025: the OLD server (hostname **NEWSERVER**, domain PSTMC) crashed; a second failure during restore corrupted file-table→data mappings. Corrupted files carry the original name/size but contain foreign data blocks (MPEG-2 video streams `00 00 01 BA`, ownCloud sync-log text, etc.). Mara's July-2026 Claude analysis of `_C_IC_Payments_2-12_to_2-26-25.xlsx` (62,993 bytes, MPEG content) is in Mike's Documents (`Data recovery covo Claude.docx`).
|
||||
|
||||
**Damage inventory (live G:\Shares, Mike's `[C]` filename prefix = confirmed corrupt):** 5,044 files, ~2.9 GB — 4,858 PDF, 108 xlsx, 25 docx; 5,027 under Private (~129 across Accounting Docs year folders 2016-2025). Full list: PST-SERVER `C:\PST-Recovery\corrupted-file-list-20260702.txt` (size TAB path). In the 2024/2025 payroll trees specifically only 5 of 161 Office files are corrupt, incl. Mara's IC Payments 2-12–2-26-25 (MPEG in BOTH G: `[C]` copy and D:\Shares copy — corruption predates all copies) and IC Payments 5-13–5-27-25 (content = ownCloud log text; Mara built a partial replacement "(clare and alice corrections ONLY)").
|
||||
|
||||
**Recovery corpus on PST-SERVER D: (931 GB, label "VM Files" — the old server's drive; FROZEN, no cleanup):**
|
||||
- `D:\Shares` — crash-era share tree (2025-06-03), incl. full Accounting Docs 2013-2025; mostly intact.
|
||||
- `D:\Recovery2019` — restore attempt (2025-06-26), Private+Scanned.
|
||||
- `D:\Recovery-EXT` — ownCloud/Syncthing copy circa 2021 (complete IC Payments 2018 – mid-2021).
|
||||
- `D:\Unknown folder` — file-carving output (2025-06-03): 101,552 files at root (`[000024].xlsx` bracket names; 20,345 .doc, 1,121 .xls, 9,274 .pdf) + hex-named subdirs; candidate source for recovering the `[C]` files.
|
||||
- `D:\Users` — old-server profiles (mconcordia, hallb, lmt, pst-admin, Administrator.PSTMC/NEWSERVER).
|
||||
|
||||
**No cloud copy predates the crash:** MSP360 plan "Files Backup 2025" was created 2025-06-04 (crash day); B2 fully enumerated 2026-07-02 — generic bucket (MSPBackups20200311) holds other clients only (FSG-SRV-02, UC2-SERVER, LAB-BECKY, DROBO, VWP-SERVER, SALMON/TROUT), ACG-PST has only post-crash data, ACG-Internal only NEPTUNE.
|
||||
|
||||
**Gotcha:** `G:\Shares` ROOT denies SYSTEM directory enumeration (Access denied) — recursive scans from the root silently return nothing; enumerate the children (`Private`, `Scanned`, ...) directly.
|
||||
|
||||
**Carve-identification results (2026-07-02): all 4 MPEG-corrupted 2024/2025 payroll files RECOVERED** from `D:\Unknown folder` carved output. Method: fingerprint sharedStrings vocabulary from adjacent-period good files → score ~770 carved xlsx by token overlap → confirm by exact byte-size match with the corrupted original (NTFS keeps true size) + date-serial range / sheet title inside. Staged as copies (NOT yet placed into the live share — needs Excel-open validation + Mara sign-off):
|
||||
`C:\PST-Recovery\carve-identified\` on PST-SERVER:
|
||||
- `IC Payments 2-12 to 2-26-25` <- `[006001].xlsx` (62,993 B; serials exactly 2025-02-12..02-26) — **the file Mara has chased for a year**
|
||||
- `Payroll Report 4-29-2025 - 5-12-2025` <- `[007234].xlsx` (53,480 B; sheet title contains the full period)
|
||||
- `Tips Report 12-30--1-12-25` <- `[007102].xlsx` (20,302 B; serials 2024-12-30..2025-01-12; original name said "12-13" — likely Mara typo)
|
||||
- `Triwest & Insurance ... 2024-11-15 check` <- `[006975].xlsx` (19,904 B; October-2024 data, consistent with 11/15 check run)
|
||||
Also spotted in the carve dump with its original name: `IC Payments 2024-08-12--2024-08-27.xlsx` (253,949 B) — a period absent from the 2024 tree. Scoring artifacts: `C:\PST-Recovery\carve-match-xlsx.txt`.
|
||||
|
||||
**Remaining:** the 5th damaged file `IC Payments 5-13 to 5-27-25` (content = ownCloud log; no exact-size carve hit; Mara's "(clare and alice corrections ONLY)" partial rebuild exists) — nearest candidate `[005037].xlsx` (56,344 B, score 58) unverified. And the broader ~5,039 other `[C]` files (mostly PDFs) — same identify-by-size/content approach can be batch-applied to the carved .pdf pool (9,274 root PDFs) if Mike/Mara want to chase them.
|
||||
|
||||
### Deletion Investigation (June–July 2026)
|
||||
|
||||
A report that client files disappeared (trigger: the "Glennda" folder) prompted a staged restore-and-diff investigation. The 6/24 10:05 AM restore point was staged to `C:\PST-Recovery\PreDelete-0624` (~99 GB). Authoritative diff: **47,749 files deleted from @Clients since 6/24 10:05**; ~93% intentional duplicate cleanup (33,711 in folders labeled "duplicate DO NOT USE or delete"; ~10,696 in nested misfile-buckets A\A, D\A, P\O, H\I whose canonical client folders remain live). Genuine loss estimate: **~3,342 files**, recoverable via no-overwrite copy-back from staging (not yet executed — awaiting Mike/Mara approval; writes to live HIPAA data). The 10:05->12:05 PM window had only 2 deletions (Ballard, Kathy and Rivera, Anthony SOAP PDFs) — mass deletion occurred later. Glennda trigger: `EDWARDS, GLENDA` (single-N, 79 files, deleted) was a misspelled duplicate of the active canonical `EDWARDS, GLENNDA VA REFERRAL` (double-N, 127 files, live and growing). Shelton report: only 6 old Shelton files exist (2011–2015), loose in `S\`, CreationTime 2025-06-02 (migration), unchanged since 6/24 — not a 2026 deletion; the 6/29/2025 restore point needed for further check has been purged. Staging artifacts (~200 GB, removable after recovery decision): `C:\PST-Recovery\{PreDelete-0624, PostDelete-0624, authdiff, incidentdiff, acl-backup-scanned-20260701-072725.txt}`.
|
||||
@@ -250,7 +277,7 @@ As of 2026-07-01 session end:
|
||||
- **[OPEN] UDR port-forward reboot-persistence test.**
|
||||
- **[OPEN] DDNS for VPN endpoint** (hardcoded Cox WAN 98.190.129.150).
|
||||
- **[OPEN] Vault drift — pst-admin password** (vpn.sops.yaml vs 2026-05-22 reset). Verify with Mara.
|
||||
- **[OPEN] D: backup-junk cleanup on PST-SERVER** (~700 GB).
|
||||
- **[FROZEN - DO NOT CLEAN] D: on PST-SERVER** — is NOT junk; it is the June-2025 crash recovery corpus (see "2025 Crash & Corruption" section). No deletion until the corruption-recovery effort concludes.
|
||||
- **[OPEN] PST-SERVER temp/staging cleanup:** `C:\PST-Backup\*` (SYSVOL/GPO backups) once rebuild confirmed stable; `C:\ProgramData\` cert-enroll scratch (*.inf/*.req/*.cer/*.pfx, gen_certs.ps1, etc.); temp firewall rules TEMP-CertEnroll-RPC / TEMP-CertEnroll-DCOM.
|
||||
- **[OPEN] Backup synthetic-full confirmation** — confirm "Files Backup 2025" completes cleanly after the stop/resume.
|
||||
- **[DEFERRED] Machine cert VPN path (IKEv2)** — certs/PFXs exist (MaraHomeNew D067E07B, Maras-HP-Laptop 4CADDE8F, PST-SURFACE 197FF22A); superseded by L2TP. Complete, abandon, or revoke.
|
||||
|
||||
Reference in New Issue
Block a user