sync: auto-sync from HOWARD-HOME at 2026-07-22 13:21:04
Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-07-22 13:21:04
This commit is contained in:
@@ -194,3 +194,94 @@ Separately, billed Syncro ticket #32573 (Cascades of Tucson - "Onsite - Memcare
|
||||
- **AIM RemoteApp alias:** `AIM` (collection "v12", path `S:\AIM\AIM.exe`)
|
||||
- **AIMRDP8.exe PDB path:** `C:\Projects\AIMsi\AIMsi V12\AIMsiRDP8\obj\Release\AIMRDP8.pdb`
|
||||
- **Tri-Tech docs:** https://www.tritechretail.com/topic/aim
|
||||
|
||||
---
|
||||
|
||||
## Update: 13:19 PT -- M365 tenant onboarding, USER# on IMC1, billing
|
||||
|
||||
### Session Summary
|
||||
|
||||
Continued DESKTOP-KRHQ5TS setup. Howard identified that the USER#=4 environment variable set on the laptop would not carry into RDP sessions on IMC1 -- AIMsi reads the variable from the server's user profile, not the client. Set USER#=4 for edservices4 at the user level on IMC1 via the registry (`HKEY_USERS\<SID>\Environment`), confirmed it won't affect other users (each user has their own: leslie=8, station3=3, Dakota=22, Erik=24, system default=17).
|
||||
|
||||
Onboarded IMC's M365 tenant (`instrumentalmusic.onmicrosoft.com`, tenant ID `65adab75-f1fd-4ef9-b2b4-c24f595393e3`) to the ACG remediation app suite via `/onboard365`. Consent link was sent to Howard's Discord DM. After consent, provisioned all 4 apps (Defender skipped -- no MDE license). Initial provision had transient SP replication errors ("Resource does not exist"); re-run after 10 seconds completed cleanly with all permissions granted and directory roles assigned.
|
||||
|
||||
Checked license inventory: 5x O365_BUSINESS (Microsoft 365 Apps for Business), all 5 consumed (management, moo, remote, repair, retail). Zero available. Howard assigned the Management license to the edservices4 account manually. Updated the IMC M365 docs and vaulted all 5 account credentials from Leslie's spreadsheet photo.
|
||||
|
||||
Billed ticket #32569 via the /syncro skill: 1.0h Labor - Remote Business, prepaid block 9.5 -> 8.5 hrs, invoice $0.00. Resolution comment included full end-user instructions for offsite (VPN + RDP) and onsite (direct AIM) workflows, plus all login credentials.
|
||||
|
||||
Separately, the Cascades ASSISTNURSE-PC kiosk config (tracker issue #29) was checked -- still open, needs OU move + printers + gpupdate. Howard passed that to another session.
|
||||
|
||||
### Key Decisions
|
||||
|
||||
- Set USER#=4 at user level (not system level) on IMC1 to avoid conflicting with other RDP users' AIMsi workstation numbers.
|
||||
- Used /syncro skill for billing (correcting the earlier hand-roll mistake on #32573).
|
||||
- Included plaintext credentials in the customer-visible ticket comment per Howard's direction -- this is an internal-use workstation with generic shared credentials, not a personal account.
|
||||
|
||||
### Problems Encountered
|
||||
|
||||
- **M365 tenant onboarding SP replication delay:** First provision run had 10 errors ("Resource does not exist") because the newly created service principals hadn't replicated in Entra ID. Re-running after 10 seconds completed cleanly. This is a known transient issue.
|
||||
- **Hand-rolled billing correction logged:** The Cascades #32573 billing earlier in the session used raw curl instead of the /syncro skill. Logged as a correction to errorlog.md. IMC #32569 billing used the skill correctly.
|
||||
|
||||
### Configuration Changes (this update)
|
||||
|
||||
#### IMC1
|
||||
- `HKEY_USERS\<edservices4-SID>\Environment\USER#` = `4` (user-level env var for RDP sessions)
|
||||
|
||||
#### IMC M365 Tenant (instrumentalmusic.onmicrosoft.com)
|
||||
- ComputerGuru Tenant Admin -- consented + Conditional Access Administrator role
|
||||
- ComputerGuru Security Investigator -- consented + Exchange Administrator role
|
||||
- ComputerGuru Exchange Operator -- consented + Exchange Administrator role
|
||||
- ComputerGuru User Manager -- consented + User Administrator + Authentication Administrator roles
|
||||
- Management license assigned to edservices4 (by Howard manually)
|
||||
|
||||
#### Vault
|
||||
- `clients/imc/m365-accounts.sops.yaml` -- all 5 IMC M365 role-based account credentials
|
||||
|
||||
#### Docs
|
||||
- `clients/instrumental-music-center/docs/cloud/m365.md` -- updated with tenant info, accounts, mixed identity notes
|
||||
|
||||
### Credentials & Secrets (this update)
|
||||
|
||||
#### M365 (instrumentalmusic.onmicrosoft.com)
|
||||
Vaulted at `clients/imc/m365-accounts.sops.yaml`:
|
||||
- moo@instrumentalmusic.onmicrosoft.com / Xux27797
|
||||
- management@instrumentalmusic.onmicrosoft.com / Lom44612
|
||||
- remote@instrumentalmusic.onmicrosoft.com / Suw80728
|
||||
- repair@instrumentalmusic.onmicrosoft.com / Dun81194
|
||||
- retail@instrumentalmusic.onmicrosoft.com / Sax32322
|
||||
|
||||
### Infrastructure (this update)
|
||||
|
||||
- **IMC M365 tenant ID:** 65adab75-f1fd-4ef9-b2b4-c24f595393e3
|
||||
- **Tenant domain:** instrumentalmusic.onmicrosoft.com
|
||||
- **License:** O365_BUSINESS (Microsoft 365 Apps for Business), 5 seats, all consumed
|
||||
- **No MDE license** (Defender tier skipped)
|
||||
|
||||
### Syncro Billing (this update)
|
||||
|
||||
- **Ticket #32569** (Instrumental Music Center) -- "Laptop - Set up for new user..."
|
||||
- Comment: Resolution with full setup details and end-user instructions
|
||||
- Line item: 1.0h Labor - Remote Business ($150.00, taxable: false)
|
||||
- Invoice: $0.00 (prepaid block 9.5 -> 8.5 hrs)
|
||||
- Invoice note: "Block hours remaining: 8.5."
|
||||
- Status: Invoiced
|
||||
- Bot alert: posted
|
||||
|
||||
### Pending / Incomplete Tasks (final)
|
||||
|
||||
- **Datto EDR for DESKTOP-KRHQ5TS:** Not yet enrolled. Push via /rmm once confirmed.
|
||||
- **OpenVPN auto-start:** User must manually connect VPN after each login. Could automate.
|
||||
- **ServerIMC phantom DC:** Fleet-wide auth degradation unresolved. No ticket opened.
|
||||
- **IMC1 RMM UUID in wiki:** Stale (`fa99e913` -> `88cbf7c0`).
|
||||
- **Manda's VPN account on UDM:** Still active. Confirm if still needed.
|
||||
- **Cascades ASSISTNURSE-PC kiosk:** Tracker issue #29 open. Passed to another session.
|
||||
|
||||
### Reference Information (this update)
|
||||
|
||||
- **Syncro ticket #32569:** https://computerguru.syncromsp.com/tickets/114041531
|
||||
- **IMC M365 tenant:** 65adab75-f1fd-4ef9-b2b4-c24f595393e3
|
||||
- **Tenant Admin SP:** 400ac92e-9fab-4c39-b0ce-01d53ab5afbd
|
||||
- **Security Investigator SP:** 0f1aa115-f401-4582-9b68-7b65b47af4c8
|
||||
- **Exchange Operator SP:** 5ea49994-42b1-4739-854d-b6b5163a69d6
|
||||
- **User Manager SP:** 6f566da6-0214-43fb-b83a-c323f69a5710
|
||||
- **IMC prepaid block:** 8.5 hrs remaining (after 1.0h debit from #32569)
|
||||
|
||||
Reference in New Issue
Block a user