azcomputerguru/claudetools
1
0
Fork 0
Code Issues 58 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-04-22 21:40:31

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-04-22 21:40:31
This commit is contained in:
Howard Enos
2026-04-22 21:40:32 -07:00
parent bb8a462641
commit 65ec8eca9f
11 changed files with 2236 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

426
clients/cascades-tucson/reports/2026-04-22-g1-ad-audit.md Normal file
View File

@@ -0,0 +1,426 @@
# CS-SERVER G1 AD Audit
**Command ID:** e83befb7-4c8c-4f24-9b24-56cb641e6464
**Run:** 2026-04-23T02:55:50.634848Z
**Exit:** 0
## STDOUT
```
G1 AD Audit - 2026-04-22 19:55:51 -07:00
Host: CS-SERVER
============================================================================
== 1. Forest / Domain / Schema
============================================================================
Forest FQDN: cascades.local
Forest mode: Windows2016Forest
Domain mode: Windows2016Domain
Domain DN: DC=cascades,DC=local
NetBIOS: CASCADES
UPN suffixes (forest):
- cascadestucson.com
Schema objectVersion: 88
FSMO roles:
Schema Master: CS-SERVER.cascades.local
Domain Naming Master: CS-SERVER.cascades.local
PDC Emulator: CS-SERVER.cascades.local
RID Master: CS-SERVER.cascades.local
Infrastructure Master: CS-SERVER.cascades.local
============================================================================
== 2. OU structure
============================================================================
Total OUs: 18
OU=Administrative,OU=Departments,DC=cascades,DC=local users=5 groups=0 computers=0
OU=Care-Assisted Living,OU=Departments,DC=cascades,DC=local users=4 groups=0 computers=0
OU=Care-Memorycare,OU=Departments,DC=cascades,DC=local users=2 groups=0 computers=0
OU=Culinary,OU=Departments,DC=cascades,DC=local users=4 groups=0 computers=0
OU=Departments,DC=cascades,DC=local users=0 groups=0 computers=0
OU=Domain Controllers,DC=cascades,DC=local users=0 groups=0 computers=1
OU=Groups,DC=cascades,DC=local users=0 groups=1 computers=0
OU=Housekeeping,OU=Departments,DC=cascades,DC=local users=1 groups=0 computers=0
OU=Life Enrichment,OU=Departments,DC=cascades,DC=local users=2 groups=0 computers=0
OU=Maintenance,OU=Departments,DC=cascades,DC=local users=2 groups=0 computers=0
OU=Marketing,OU=Departments,DC=cascades,DC=local users=4 groups=0 computers=0
OU=Nurses,OU=Care-Assisted Living,OU=Departments,DC=cascades,DC=local users=0 groups=0 computers=0
OU=Resident Services,OU=Departments,DC=cascades,DC=local users=8 groups=0 computers=0
OU=ServiceAccounts,DC=cascades,DC=local users=1 groups=0 computers=0
OU=Shared PCs,OU=Workstations,DC=cascades,DC=local users=0 groups=0 computers=0
OU=Staff PCs,OU=Workstations,DC=cascades,DC=local users=0 groups=0 computers=6
OU=Transportation,OU=Departments,DC=cascades,DC=local users=3 groups=0 computers=0
OU=Workstations,DC=cascades,DC=local users=0 groups=0 computers=0
Users in default CN=Users container (not ideal - should be in an OU for sync scope):
Count: 8
- Administrator (Administrator)
- directoryshare (directoryshare)
- Guest (Guest)
- krbtgt (krbtgt)
- localadmin (localadmin)
- QBDataServiceUser34 (QBDataServiceUser34)
- Receptionist (RECEPTIONIST)
- sysadmin (Sysadmin)
============================================================================
== 3. All AD users - identity attributes for sync match
============================================================================
Total users: 44
Enabled: 42
Disabled: 2
Per-user identity dump (focus: anything that affects soft-match):
SAM | UPN | Mail | ProxyAddrs | PwdLastSet | PwdNeverExp | Enabled | OU
---
Administrator | | | | 2024-08-04 | True | True | CN=Users
Allison.Reibschied | Allison.Reibschied@cascadestucson.com | | | 2026-03-13 | False | True | OU=Administrative,OU=Departments
Alyssa.Brooks | Alyssa.Brooks@cascadestucson.com | | | 2025-12-12 | False | True | OU=Culinary,OU=Departments
Ashley.Jensen | Ashley.Jensen@cascadestucson.com | | | NULL | False | True | OU=Administrative,OU=Departments
britney.thompson | britney.thompson@cascadestucson.com | | | NULL | False | True | OU=Care-Assisted Living,OU=Departments
Cathy.Kingston | Cathy.Kingston@cascadestucson.com | | | 2025-12-12 | False | True | OU=Resident Services,OU=Departments
Christina.DuPras | Christina.DuPras@cascadestucson.com | | | 2026-01-06 | False | True | OU=Resident Services,OU=Departments
Christine.Nyanzunda | Christine.Nyanzunda@cascadestucson.com | | | NULL | False | True | OU=Care-Memorycare,OU=Departments
Christopher.Holick | Christopher.Holick@cascadestucson.com | | | 2025-12-12 | False | True | OU=Transportation,OU=Departments
Crystal.Rodriguez | Crystal.Rodriguez@cascadestucson.com | | | 2026-04-20 | False | True | OU=Marketing,OU=Departments
Culinary | Culinary@cascades.local | | | 2024-12-27 | True | True | OU=Culinary,OU=Departments
directoryshare | directoryshare@cascades.local | | | 2025-12-01 | True | True | CN=Users
Guest | | | | NULL | True | False | CN=Users
howard | howard@cascadestucson.com | | | 2025-08-11 | True | True | OU=Administrative,OU=Departments
JD.Martin | JD.Martin@cascadestucson.com | | | NULL | False | True | OU=Culinary,OU=Departments
John.Trozzi | John.Trozzi@cascadestucson.com | | | NULL | False | True | OU=Maintenance,OU=Departments
Julian.Crim | Julian.Crim@cascadestucson.com | | | 2025-12-12 | False | True | OU=Transportation,OU=Departments
karen.rossini | karen.rossini@cascadestucson.com | | | 2025-12-12 | False | True | OU=Care-Assisted Living,OU=Departments
krbtgt | | | | 2024-08-28 | False | False | CN=Users
Kyla.QuickTiffany | Kyla.QuickTiffany@cascadestucson.com | | | 2026-04-13 | False | True | OU=Resident Services,OU=Departments
lauren.hasselman | lauren.hasselman@cascadestucson.com | | | 2026-04-01 | False | True | OU=Administrative,OU=Departments
localadmin | | | | 2024-12-03 | True | True | CN=Users
Lois.Lane | Lois.Lane@cascadestucson.com | | | 2025-12-22 | True | True | OU=Care-Assisted Living,OU=Departments
Lupe.Sanchez | Lupe.Sanchez@cascadestucson.com | | | 2025-12-12 | False | True | OU=Housekeeping,OU=Departments
Matt.Brooks | Matt.Brooks@cascadestucson.com | | | NULL | False | True | OU=Maintenance,OU=Departments
Megan.Hiatt | Megan.Hiatt@cascadestucson.com | | | NULL | False | True | OU=Marketing,OU=Departments
Meredith.Kuhn | Meredith.Kuhn@cascadestucson.com | | | NULL | False | True | OU=Administrative,OU=Departments
Michelle.Shestko | Michelle.Shestko@cascadestucson.com | | | NULL | False | True | OU=Resident Services,OU=Departments
QBDataServiceUser34 | | | | 2024-10-02 | True | True | CN=Users
Ramon.Castaneda | Ramon.Castaneda@cascadestucson.com | | | NULL | False | True | OU=Culinary,OU=Departments
Ray.Rai | Ray.Rai@cascadestucson.com | | | 2025-12-12 | False | True | OU=Resident Services,OU=Departments
Receptionist | RECEPTIONIST@cascades.local | | | 2026-04-07 | True | True | CN=Users
Richard.Adams | Richard.Adams@cascadestucson.com | | | 2025-12-12 | False | True | OU=Transportation,OU=Departments
saleshare | | | | 2025-10-27 | False | True | OU=Marketing,OU=Departments
Sebastian.Leon | Sebastian.Leon@cascadestucson.com | | | NULL | False | True | OU=Resident Services,OU=Departments
Sharon.Edwards | Sharon.Edwards@cascadestucson.com | | | 2026-04-13 | False | True | OU=Life Enrichment,OU=Departments
Shelby.Trozzi | Shelby.Trozzi@cascadestucson.com | | | 2025-12-11 | True | True | OU=Care-Memorycare,OU=Departments
Sheldon.Gardfrey | Sheldon.Gardfrey@cascadestucson.com | | | 2025-12-12 | False | True | OU=Resident Services,OU=Departments
Shontiel.Nunn | Shontiel.Nunn@cascadestucson.com | | | 2025-12-12 | False | True | OU=Resident Services,OU=Departments
Susan.Hicks | Susan.Hicks@cascadestucson.com | | | 2026-04-13 | False | True | OU=Life Enrichment,OU=Departments
svc-audit-upload | | | | 2026-04-17 | True | True | OU=ServiceAccounts
sysadmin | sysadmin@cascadestucson.com | | | 2024-09-29 | True | True | CN=Users
Tamra.Matthews | Tamra.Matthews@cascadestucson.com | | | NULL | False | True | OU=Marketing,OU=Departments
Veronica.Feller | Veronica.Feller@cascadestucson.com | | | NULL | False | True | OU=Care-Assisted Living,OU=Departments
============================================================================
== 4. Soft-match risk scan - accounts likely to duplicate in Entra
============================================================================
--- Users with NO proxyAddresses and NO mail (soft-match engine has nothing to work with):
- Administrator (UPN: )
- localadmin (UPN: )
- Meredith.Kuhn (UPN: Meredith.Kuhn@cascadestucson.com)
- John.Trozzi (UPN: John.Trozzi@cascadestucson.com)
- Megan.Hiatt (UPN: Megan.Hiatt@cascadestucson.com)
- Crystal.Rodriguez (UPN: Crystal.Rodriguez@cascadestucson.com)
- Tamra.Matthews (UPN: Tamra.Matthews@cascadestucson.com)
- Lois.Lane (UPN: Lois.Lane@cascadestucson.com)
- Christina.DuPras (UPN: Christina.DuPras@cascadestucson.com)
- Christine.Nyanzunda (UPN: Christine.Nyanzunda@cascadestucson.com)
- Susan.Hicks (UPN: Susan.Hicks@cascadestucson.com)
- Ashley.Jensen (UPN: Ashley.Jensen@cascadestucson.com)
- Veronica.Feller (UPN: Veronica.Feller@cascadestucson.com)
- Sebastian.Leon (UPN: Sebastian.Leon@cascadestucson.com)
- JD.Martin (UPN: JD.Martin@cascadestucson.com)
- Matt.Brooks (UPN: Matt.Brooks@cascadestucson.com)
- Ramon.Castaneda (UPN: Ramon.Castaneda@cascadestucson.com)
- Michelle.Shestko (UPN: Michelle.Shestko@cascadestucson.com)
- Sharon.Edwards (UPN: Sharon.Edwards@cascadestucson.com)
- sysadmin (UPN: sysadmin@cascadestucson.com)
- QBDataServiceUser34 (UPN: )
- Culinary (UPN: Culinary@cascades.local)
- Receptionist (UPN: RECEPTIONIST@cascades.local)
- britney.thompson (UPN: britney.thompson@cascadestucson.com)
- howard (UPN: howard@cascadestucson.com)
- saleshare (UPN: )
- directoryshare (UPN: directoryshare@cascades.local)
- Shelby.Trozzi (UPN: Shelby.Trozzi@cascadestucson.com)
- karen.rossini (UPN: karen.rossini@cascadestucson.com)
- Alyssa.Brooks (UPN: Alyssa.Brooks@cascadestucson.com)
- Lupe.Sanchez (UPN: Lupe.Sanchez@cascadestucson.com)
- Sheldon.Gardfrey (UPN: Sheldon.Gardfrey@cascadestucson.com)
- Cathy.Kingston (UPN: Cathy.Kingston@cascadestucson.com)
- Shontiel.Nunn (UPN: Shontiel.Nunn@cascadestucson.com)
- Ray.Rai (UPN: Ray.Rai@cascadestucson.com)
- Richard.Adams (UPN: Richard.Adams@cascadestucson.com)
- Julian.Crim (UPN: Julian.Crim@cascadestucson.com)
- Christopher.Holick (UPN: Christopher.Holick@cascadestucson.com)
- lauren.hasselman (UPN: lauren.hasselman@cascadestucson.com)
- Allison.Reibschied (UPN: Allison.Reibschied@cascadestucson.com)
- Kyla.QuickTiffany (UPN: Kyla.QuickTiffany@cascadestucson.com)
- svc-audit-upload (UPN: )
--- Users whose UPN suffix is NOT cascadestucson.com (will mismatch M365 target unless renamed):
- Culinary UPN=Culinary@cascades.local
- Receptionist UPN=RECEPTIONIST@cascades.local
- directoryshare UPN=directoryshare@cascades.local
--- Users whose SAM does not match their UPN prefix (name mismatch candidates):
--- Users with DisplayName different from Given+Surname (may cause display oddities post-sync):
- SAM=Crystal.Rodriguez display='Crystal Rodriguez' expected='Crystal Rodriguez'
- SAM=howard display='howard' expected='Howard Dax'
- SAM=Cathy.Kingston display='Cathy.Kingston' expected='Cathy Kingston'
============================================================================
== 5. Password hygiene (affects whether sync-derived sign-in will work)
============================================================================
--- Enabled users with null PasswordLastSet (never set a password):
- Meredith.Kuhn whenCreated=2024-08-28
- John.Trozzi whenCreated=2024-08-28
- Megan.Hiatt whenCreated=2024-08-28
- Tamra.Matthews whenCreated=2024-08-28
- Christine.Nyanzunda whenCreated=2024-08-28
- Ashley.Jensen whenCreated=2024-08-28
- Veronica.Feller whenCreated=2024-08-28
- Sebastian.Leon whenCreated=2024-08-28
- JD.Martin whenCreated=2024-08-28
- Matt.Brooks whenCreated=2024-08-28
- Ramon.Castaneda whenCreated=2024-08-28
- Michelle.Shestko whenCreated=2024-08-28
- britney.thompson whenCreated=2025-06-12
--- Users with PasswordNotRequired=True:
- Guest enabled=False
--- Users with PasswordNeverExpires=True:
- Administrator PwdLastSet=08/04/2024 18:39:34 Description='Built-in account for administering the computer/domain'
- localadmin PwdLastSet=12/03/2024 15:22:15 Description=''
- Lois.Lane PwdLastSet=12/22/2025 09:52:55 Description=''
- sysadmin PwdLastSet=09/29/2024 21:23:28 Description=''
- QBDataServiceUser34 PwdLastSet=10/02/2024 12:22:12 Description='This account has been established to run the QuickBooks database system.'
- Culinary PwdLastSet=12/27/2024 10:17:03 Description=''
- Receptionist PwdLastSet=04/07/2026 12:54:47 Description=''
- howard PwdLastSet=08/11/2025 13:18:03 Description='Home Offie'
- directoryshare PwdLastSet=12/01/2025 10:02:12 Description=''
- Shelby.Trozzi PwdLastSet=12/11/2025 14:03:27 Description=''
- svc-audit-upload PwdLastSet=04/17/2026 15:21:13 Description='Write-only access to \\CS-SERVER\AuditDrop$. Used by Syncro audit upload script. Do not use interactively.'
--- Currently locked-out accounts:
krbtgt password last set: 08/28/2024 10:02:37 (age: 602 days)