diff --git a/wiki/clients/universal-minerals.md b/wiki/clients/universal-minerals.md index 31a482f..8a63a0b 100644 --- a/wiki/clients/universal-minerals.md +++ b/wiki/clients/universal-minerals.md @@ -7,113 +7,83 @@ compiled_by: HOWARD-HOME/claude-main sources: - clients/universal-minerals/session-logs/2026-06/2026-06-10-howard-cyndyoffice-freeze-diagnosis.md - Syncro customer 34844920 - - Syncro ticket #32397 (112445840) + - Syncro ticket #32397 (id 112445840) - .claude/memory/cyndyoffice-physical-hp-lockups.md backlinks: [] --- # Universal Minerals International Inc -Mineral / commodities business in Tucson, AZ. ACG client on a **per-incident (break-fix) -basis — NO prepaid block and NOT an RMM / monitoring client.** Work is billed per ticket -at standard rates. This is a thin seed article (first compiled 2026-06-10 from the -CyndyOffice freeze diagnosis); expand as more is learned, like the other client articles. +Minerals / commodities business in Tucson, AZ. ACG client on a **per-incident (break-fix) basis — NO prepaid block and NOT an RMM / monitoring client.** Work is billed per ticket at standard rates. --- ## Profile - **Company type:** Minerals / commodities (domain `umint.com`) -- **Contract type:** Per-incident / break-fix. **Prepay hours: 0.0** (always re-check - `GET /customers/34844920` before billing). No monitoring or RMM contract. +- **Contract type:** Per-incident / break-fix. Prepay hours: 0.0 (always re-check `GET /customers/34844920` before billing). No monitoring or RMM contract. - **Billing rate:** Onsite $175/hr (Syncro product 26118); standard non-prepaid rates. - [verify tax rate is assigned before any hardware/taxable billing] - **Syncro customer ID:** `34844920` - **Address:** 4620 South Coach Drive, Tucson, AZ 85714 - **Main phone:** 520-838-0945 - **Key contacts:** - Amber R. — amberr@umint.com (Syncro primary email on file) - Accounts Payable — accountspayable@umint.com (Syncro contact) - - **Cyndy** — primary user of the "CyndyOffice" workstation (the machine in ticket - #32397); [verify full name / role] -- **Active ticket:** #32397 (see Active Work) + - **Cyndy** — primary user of the CyndyOffice workstation; full name / role (verify) +- **Managed assets (Syncro):** 0 +- **Billing pattern:** Established break-fix client; occasional small jobs. Invoice history: #100079 $75.00 (2025-12-17), #67060 $75.00 (2026-02-25), #67810 $175.00 (2026-06-10). Onsite labor at $175/hr. +- **Tax rate:** (verify — confirm assignment in Syncro before any hardware / taxable billing) --- ## Infrastructure -> Sparse — only what surfaced during the 2026-06-10 freeze diagnosis. Expand as more -> of the environment is documented. +> Sparse — only what surfaced during the 2026-06-10 freeze diagnosis. Expand as more of the environment is documented. ### Workstations -- **CyndyOffice** — Cyndy's primary desktop. - - **Hardware:** HP Pavilion Desktop **TP01-2xxx** (AMD, 16 logical CPUs, single 16 GB - Kingston DIMM, 1 TB WD SN530 NVMe). - - **Identifiers:** Product # (SKU) `318G6AA#ABA`; Serial / Service Tag `2MO21549RB`; - motherboard HP 8906; BIOS **F.38** (updated from F.36 on 2026-06-10). +- **CyndyOffice** — Cyndy's primary desktop. Physical HP Pavilion Desktop, NOT a VM despite the RMM site name "Howard-VM" that was briefly in use. + - **Hardware:** HP Pavilion Desktop **TP01-2xxx** (AMD, 16 logical CPUs, single 16 GB Kingston DIMM, 1 TB WD SN530 NVMe). + - **Identifiers:** Product # (SKU) `318G6AA#ABA`; Serial / Service Tag `2MO21549RB`; motherboard HP 8906; BIOS **F.38** (updated 2026-06-10 from F.36 via HP Support Assistant; F.38 dated 2025-07-30). - **OS:** Windows 11 Home, build 26200. - - **Line-of-business app:** QuickBooks **Enterprise 22.0** (2022 edition — past Intuit - support). QuickBooks Tool Hub installed. - - **RMM:** A GuruRMM agent was installed **temporarily for diagnosis only** on - 2026-06-10 and **fully removed the same day** (services + binary + data dir - uninstalled, server-side record deleted). This client does not pay for RMM/monitoring. + - **Line-of-business app:** QuickBooks **Enterprise 22.0** (2022 edition — past Intuit support). QuickBooks Tool Hub installed. + - **Security:** Windows Defender only (no third-party AV active; orphaned `mbamchameleon` Malwarebytes leftover driver removed 2026-06-10). + - **RMM:** A GuruRMM agent was installed **temporarily for diagnosis only** on 2026-06-10 and **fully removed the same day** (Windows services + binary + data directories uninstalled via detached scheduled task; server-side record deleted via `DELETE /api/agents/` → HTTP 204). This client does not pay for RMM/monitoring. Any future RMM use must follow the same install-diagnose-remove pattern. + +### Other Workstations / Servers + +- (verify — no other machines surfaced during the 2026-06-10 engagement) ### Email & Identity -- Domain `umint.com`. Platform (M365 / Google / on-prem Exchange) **[verify]**. +- Domain `umint.com`. Platform (M365 / Google Workspace / on-prem Exchange) (verify). --- ## Access - **Syncro:** customer `34844920`. -- **Vault root:** none yet (`clients/universal-minerals/` not created in vault — no - credentials captured this engagement). +- **Vault root:** none yet — `clients/universal-minerals/` has not been created in the vault. No credentials were captured during the 2026-06-10 engagement. RMM and Syncro auth used existing shared MSP vault paths (`infrastructure/gururmm-server.sops.yaml`, Syncro per-user key for howard). --- ## Patterns & Known Issues -- **CyndyOffice intermittent hard freeze / forced power-off (under investigation, - 2026-06-10).** The machine locks up solid and must be force-powered-off. Event-log - signature: ~20 occurrences over 6 weeks, each a **Kernel-Power 41 with bugcheck code 0 - and NO crash dump**, paired with a 6008 dirty-shutdown; **no WHEA hardware errors**. With - crash dumps confirmed enabled, the absence of any dump means these are **true - hardware/firmware freezes, not a Windows BSOD/software crash** — the event log goes - silent at each freeze and resumes only at next boot. Ruled out: SSD healthy (0% wear), - sleep/wake (no auto-sleep on AC), AV conflict (Defender only), idle thermal (~30C). - Fixes applied 2026-06-10: **BIOS F.36 -> F.38, Fast Startup disabled, Windows Memory - Diagnostic PASSED**, orphaned `mbamchameleon` (Malwarebytes leftover) service removed. - **Prime remaining hardware suspect = PSU** (stock HP Pavilion supply) if it recurs. - Diagnostic detail: [[cyndyoffice-physical-hp-lockups]]. +- **CyndyOffice intermittent hard freeze / forced power-off (partially mitigated 2026-06-10; informal monitoring window active).** The machine locks up solid and must be force-powered-off. Event-log signature: ~20 occurrences over approximately six weeks (Apr 26 – Jun 9 2026), each a **Kernel-Power 41 with bugcheck code 0 and no crash dump**, paired with a 6008 dirty-shutdown; **no WHEA hardware errors logged**. With crash dumps confirmed enabled (`CrashDumpEnabled=3, AutoReboot=1`), the absence of any minidump or MEMORY.DMP is real signal — these are **true hardware/firmware freezes, not a Windows BSOD or software crash**. The event log goes silent at each freeze and resumes only at the next boot. Ruled out: SSD healthy (0% wear, 37C), sleep/wake (no auto-sleep on AC configured), AV conflict (Defender only), idle thermal (~30C). Fixes applied 2026-06-10: **BIOS F.36 → F.38, Fast Startup disabled** (`HiberbootEnabled` 1 → 0), **Windows Memory Diagnostic (Standard 2-pass) PASSED** (no errors), **orphaned `mbamchameleon` service removed** (Malwarebytes leftover with missing .sys; deleted via `sc.exe delete` operating directly on the SCM registry key; cleared boot Event 7000). TPM-WMI 1796 (Secure Boot SBAT `0x800700c1`) left alone — identified as benign Microsoft noise. **Prime remaining hardware suspect: PSU** (stock HP Pavilion supply) if freezing recurs. Monitoring is now manual / customer-reported (no RMM). Diagnostic detail: [[cyndyoffice-physical-hp-lockups]]. -- **QuickBooks messaging crash-loop (separate from the freeze).** - `QuickBooksMessaging.exe` crash-loops (~15/min) with a .NET - `System.ObjectDisposedException` updating its system-tray NotifyIcon. Log noise only, - not the freeze cause. Repaired via QuickBooks Tool Hub 2026-06-10 (confirm clear once the - company file is in active use). QB Enterprise 22.0 is past Intuit support — a version - upgrade is the longer-term fix. +- **QuickBooks messaging crash-loop (separate from the freeze).** `QuickBooksMessaging.exe` (v1.0.9186.39137) crash-loops at approximately 15/min with a .NET `System.ObjectDisposedException` at `System.Windows.Forms.NotifyIcon.UpdateIcon` (faulting module `KERNELBASE.dll`, exception `0xE0434352`). Log noise only; not the freeze cause. Repaired via QuickBooks Tool Hub 2026-06-10 — no new crashes logged after repair + reboot. Confirm fully clear once the company file is opened and in active use. QuickBooks Enterprise 22.0 is past Intuit support; a version upgrade to a current supported year is the longer-term fix. -- **Break-fix client — confirm scope/authorization per incident.** No standing - monitoring or RMM. Any RMM agent used for diagnosis must be removed afterward (as was - done 2026-06-10). +- **Break-fix client — confirm scope and authorization per incident.** No standing monitoring or RMM contract. Any RMM agent deployed for diagnosis must be removed on completion (as was done 2026-06-10). Standard non-prepaid billing; verify prepay balance is 0.0 and confirm scope before starting work. --- ## Active Work -- **Ticket #32397 — "Onsite - Computer intermittently freezing and shutting down" - (Universal Minerals, In Progress).** - - Diagnosis complete; BIOS + Fast Startup fixes applied; RAM passed; boot-error cleanup - done. Machine is in a **monitoring window** to confirm the freezing has stopped (freezes - had been every 1-3 days). RMM removed, so monitoring is now manual / customer-reported. - - **Contingency (documented publicly on the ticket):** if freezing recurs, next step is a - full hardware diagnostic (extended memory + drive/power testing) plus a backup and clean - Windows reinstall to rule out OS corruption — ~1-2 days of machine downtime. - - **Billed:** 1.0h onsite, $175.00, invoice **#67810** (2026-06-10). Client emailed the - work summary + contingency note. Invoice PDF send is a GUI step (no verified API - endpoint). +- **Ticket #32397 — "Onsite - Computer intermittently freezing and shutting down" (status: Invoiced).** + - Diagnosis complete; BIOS F.38, Fast Startup disabled, RAM passed (Windows Memory Diagnostic Standard), boot-error cleanup done. Machine is in an informal **monitoring window** to confirm the freezing has stopped (freezes occurred every 1–3 days; watch for new Kernel-Power 41 events). No RMM in place — monitoring is manual / customer-reported. + - **Contingency (documented publicly on the ticket, client emailed):** if freezing recurs after the BIOS / Fast Startup fixes, the next step is a full hardware diagnostic (extended MemTest86 USB run + drive / PSU testing) plus a backup and clean Windows reinstall to rule out OS corruption — approximately 1–2 days of machine downtime. PSU is the prime hardware suspect. + - **Optional deferred items (not billed, not urgent):** pagefile is fixed at 1 GB on C: (recommend switching to system-managed); QuickBooks 22.0 is past Intuit support (recommend upgrade to a current supported year). + - **Billed:** 1.0h onsite, $175.00, invoice **#67810** (id 1650637398), 2026-06-10. Client emailed the work summary plus the contingency note (public Syncro comment 418397979, `do_not_email: false`). Invoice PDF send is a Syncro GUI step — no verified API endpoint; not confirmed sent via API. --- @@ -121,21 +91,22 @@ CyndyOffice freeze diagnosis); expand as more is learned, like the other client | Date | Event | |---|---| +| 2025-12-17 | Invoice #100079, $75.00 — nature of work (verify) | +| 2026-02-25 | Invoice #67060, $75.00 — nature of work (verify) | | 2026-06-09 | Ticket #32397 opened — CyndyOffice intermittently freezing and shutting down | -| 2026-06-10 | Diagnosed via temporary GuruRMM agent: confirmed hardware/firmware hard-freeze signature (Kernel-Power 41, bugcheck 0, no dump/WHEA). Applied BIOS F.38, disabled Fast Startup, ran memory test (passed), removed orphaned mbamchameleon service. Repaired QuickBooks messaging crash-loop (Tool Hub) | -| 2026-06-10 | Billed 1.0h onsite ($175, invoice #67810); client emailed summary + 1-2 day reinstall/HW-test contingency | -| 2026-06-10 | GuruRMM agent removed from CyndyOffice (uninstalled on endpoint + server record deleted) — client does not pay for RMM | +| 2026-06-10 | Howard diagnosed CyndyOffice via temporary GuruRMM agent: confirmed hardware/firmware hard-freeze signature (Kernel-Power 41, bugcheck 0, no dump, no WHEA). Applied BIOS F.38, disabled Fast Startup, ran Windows Memory Diagnostic (passed), removed orphaned `mbamchameleon` service. Repaired QuickBooks messaging crash-loop via QB Tool Hub. Ticket #32397 notes posted publicly (findings, memtest result, QB repair + contingency) | +| 2026-06-10 | Billed 1.0h onsite ($175, invoice #67810); client emailed work summary + 1–2 day reinstall/HW-test contingency | +| 2026-06-10 | GuruRMM agent removed from CyndyOffice (uninstalled via detached scheduled task + `sc delete` of services + dirs removed; server-side record deleted) — client is break-fix / no-RMM | +| 2026-06-10 | Client wiki article seeded | --- ## Compilation Notes -- Seeded 2026-06-10 (HOWARD-HOME/claude-main) from the CyndyOffice freeze-diagnosis - session log, Syncro customer 34844920, and ticket #32397. First article for this client. -- **Break-fix / no-RMM client** — the GuruRMM agent on CyndyOffice was a temporary - diagnostic tool, removed same-day. -- Flagged `[verify]`: Cyndy's full name/role; email platform for umint.com; Syncro tax-rate - assignment; the rest of the on-site environment (server? other workstations? network?). +- Full recompile 2026-06-10 (HOWARD-HOME/claude-main). Sources: CyndyOffice freeze-diagnosis session log, Syncro live data (customer 34844920, ticket #32397 id 112445840), memory file `cyndyoffice-physical-hp-lockups.md`. First full article for this client; article seeded same day as the initial engagement. +- Ticket #32397 status updated from In Progress to **Invoiced** (Syncro moved it automatically on invoice creation per Syncro billing flow). +- Break-fix / no-RMM client — the GuruRMM agent on CyndyOffice was a temporary diagnostic tool, removed same-day. +- Flagged (verify): Cyndy's full name / role; email platform for `umint.com`; nature of the two prior invoices (#100079, #67060); Syncro tax-rate assignment; the rest of the on-site environment (server, other workstations, network topology). ## Backlinks