sync: auto-sync from HOWARD-HOME at 2026-05-29 20:26:21

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-29 20:26:21

clients/cascades-tucson/session-logs/2026-05-29-session.md

@@ -288,3 +288,98 @@ ShareName: MCReception  PortName: TCP_10.0.20.78  DriverName: EPSON ET-5800 Seri
 - Printer inventory doc: clients/cascades-tucson/docs/printers.md
 - AD/GPO doc: clients/cascades-tucson/docs/servers/active-directory.md
 - Print server script: clients/cascades-tucson/docs/migration/scripts/phase2-print-server.ps1
+
+---
+
+## Update: 20:23 PT — Printer troubleshooting, billing, docs
+
+## User
+- **User:** Howard Enos (howard)
+- **Machine:** Howard-Home
+- **Role:** tech
+
+### Session Summary
+
+Continued Cascades of Tucson work following the MCReception printer share setup. Troubleshot why Alma Montt could not print to \CS-SERVER\MCReception — print jobs queued and then failed with "can't print." Ran a diagnostic on CS-SERVER via GuruRMM that confirmed TCP port 9100 was not responding on 10.0.20.78, and the ARP table had no entries for the 10.0.20.x subnet. A follow-up routing test confirmed CS-SERVER's interface is a /22 covering 192.168.0.x–192.168.3.x only; all four legacy-subnet printers responded on TCP 9100, both VLAN 20 printers failed. Root cause: pfSense intentionally blocks legacy LAN → VLAN 20 as part of the migration design (one-way rule — VLAN 20 can reach legacy, not the reverse). CS-SERVER cannot reach any device on 10.0.20.x.
+
+Clarified network architecture with Howard: the one-way firewall rule is deliberate. The plan is to migrate all users to VLAN 20 first, then move printers afterward. CS-SERVER moving to VLAN 20 early was discussed and ruled out — machines still on the legacy LAN would lose DC access since legacy → VLAN 20 is blocked, and the single-DC risk on a Dell R610 makes the move high-risk without a second DC. Discussed that the MCReception share on CS-SERVER will remain and will work once the printer is moved to the legacy subnet post-migration.
+
+Howard manually added the printer directly to Alma Montt's machine (DESKTOP-F94M8UT) at 10.0.20.78 — her machine is on VLAN 20 and can reach the printer directly. Confirmed Alma is not a receptionist but Memory Care Life Enrichment staff, based in room 515. Her machine is not enrolled in GuruRMM. The direct IP connection resolved her printing.
+
+Corrected documentation errors: the session log and AD notes had incorrectly described Alma as cloud-only M365 with no AD account — Howard confirmed she is a domain user. Billing was completed for all Cascades work done today under ticket #32303 (internal ID 110680053): 3.5h onsite covering Lois Lane domain migration (2h), Karen Rossini ALIS login (0.5h), and Memory Care Reception printer cable run + setup (1h). Invoice generated at $0.00 (prepaid block deduction). Prepay balance: 22.75 → 19.25 hrs. Winter to add ethernet cable materials as a separate line item.
+
+### Key Decisions
+
+- **CS-SERVER not moved to VLAN 20** — ruled out because legacy LAN machines still need DC access and the one-way pfSense rule would cut them off. Also single-DC risk on aging hardware. CS-SERVER moves only after all workstations are on VLAN 20 and a second DC is available.
+- **Direct IP printing for Alma** — bypasses CS-SERVER entirely since her machine is on VLAN 20. CS-SERVER share preserved for post-migration GPO deployment when printer moves to legacy subnet.
+- **Alma corrected to domain user** — previous session notes were wrong (cloud-only M365 / no AD account). She is a domain user. GPO will push MCReception to her automatically when Printer Deployment GPO goes live at Phase 3 — if her machine is enrolled and domain-joined by then.
+- **All today's work billed under #32303** — single invoice for the full day's onsite work rather than splitting across tickets, at Howard's direction.
+- **DESKTOP-F94M8UT not enrolled in GuruRMM** — noted for follow-up. Cannot manage remotely until enrolled.
+
+### Problems Encountered
+
+- **TCP 9100 not responding on 10.0.20.78** — initially suspected deep sleep (disabled per Howard). Diagnostic confirmed CS-SERVER has no ARP entries for 10.0.20.x at all — routing issue, not printer sleep. Resolved by identifying the intentional pfSense one-way VLAN rule.
+- **Subnet ping sweep timed out** — first diagnostic attempt included a full /24 ping sweep which exceeded the RMM command timeout (exit -1). Resolved by running targeted TCP checks only.
+- **RMM agent not found for DESKTOP-F94M8UT** — exact hostname match failed; partial search returned no match either. Machine is simply not enrolled. Howard added printer to Alma's machine manually.
+- **Syncro ticket lookup by number returned empty** — `GET /tickets?number=110680053` returned no results because 110680053 is the internal ticket ID, not the number (number is 32303). Resolved by searching by customer_id instead.
+
+### Configuration Changes
+
+- `clients/cascades-tucson/docs/printers.md` — Alma Montt corrected to domain user; note that DESKTOP-F94M8UT has direct IP connection to 10.0.20.78 (not via CS-SERVER share)
+- `clients/cascades-tucson/session-logs/2026-05-29-session.md` — this update appended
+
+### Credentials & Secrets
+
+None created or changed.
+
+### Infrastructure & Servers
+
+- **CS-SERVER** — IP 192.168.2.254, interface 192.168.0.0/22, default GW 192.168.0.1 (pfSense). Cannot reach 10.0.20.0/24 — pfSense blocks legacy LAN → VLAN 20.
+- **EPSON833571 (MCReception ET-5800)** — 10.0.20.78, VLAN 20. Reachable from VLAN 20 machines. Not reachable from CS-SERVER.
+- **DESKTOP-F94M8UT** — Alma Montt's machine (Memory Care Life Enrichment, room 515). On VLAN 20. Not enrolled in GuruRMM. Printer added directly at 10.0.20.78.
+
+### Commands & Outputs
+
+**CS-SERVER routing test (GuruRMM cmd 245281b2), key results:**
+```
+CS-SERVER interface: 192.168.0.0/22 (covers .0.x .1.x .2.x .3.x)
+Default gateway: 192.168.0.1
+
+FrontDesk ET-5800    192.168.2.147:9100  [OK]
+HealthServices C368  192.168.1.138:9100  [OK]
+MCDirector Canon     192.168.3.52:9100   [OK]
+MCMedTech Brother    192.168.2.53:9100   [OK]
+MCReception ET-5800  10.0.20.78:9100     [FAIL]
+BOD Brother          10.0.20.220:9100    [FAIL]
+ARP table: no entries for 10.0.20.x
+```
+
+**Syncro billing (ticket 110680053 / #32303):**
+```
+Comment:     id=414749104 (customer-visible)
+Line item:   id=42649727 — Labor - Onsite Business, 3.5h @ $175.00
+Invoice:     id=1650469577, total=$0.00 (prepaid)
+Prepay:      22.75 → 19.25 hrs remaining
+Status:      Invoiced
+```
+
+### Pending / Incomplete Tasks
+
+- **DESKTOP-F94M8UT** — enroll in GuruRMM (Cascades site) so Alma's machine can be managed remotely
+- **Winter** — add ethernet cable (15 ft) as materials line item to ticket #32303
+- **BOD Brother (10.0.20.220)** — also unreachable from CS-SERVER via same VLAN 20 issue; \CS-SERVER\BusinessOffice share is broken until printer moves to legacy subnet or pfSense rule added
+- **MCReception GPO** — Printers.xml update for OU=Care-Memorycare still pending (was mid-task when user redirected); GPO is unlinked so not urgent until Phase 3
+- **Alma Montt AD details** — confirm her AD SAMAccountName and OU placement for GPO targeting when Phase 3 goes live
+- **pfSense rule** — if any VLAN 20 printer needs to be reachable from CS-SERVER before full migration, add rule: 192.168.0.0/22 → 10.0.20.0/24 TCP 9100
+
+### Reference Information
+
+- Syncro ticket: #32303, internal ID 110680053 — Domain setup-entra sync (Cascades migration)
+- Syncro invoice: id=1650469577
+- Syncro comment: id=414749104
+- Cascades customer ID: 20149445
+- Prepay balance: 19.25 hrs as of 2026-05-29
+- EPSON833571 (MCReception): 10.0.20.78, MAC dc:cd:2f:83:35:71, share \CS-SERVER\MCReception
+- Alma Montt machine: DESKTOP-F94M8UT (not in RMM, direct IP printer at 10.0.20.78)
+- CS-SERVER agent: c39f1de7-d5b6-45ae-b132-e06977ab1713
+- BOD Brother also broken on VLAN 20: 10.0.20.220 (\CS-SERVER\BusinessOffice)