azcomputerguru/claudetools
1
0
Fork 0
Code Issues 58 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-07-20 16:39:49

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-20 16:39:49
This commit is contained in:
Howard Enos
2026-07-20 16:40:15 -07:00
parent 61a875bc00
commit a79a107142
3 changed files with 196 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files

100
clients/lens-auto-brokerage/session-logs/2026-07/2026-07-20-howard-server-migration-planning.md
View File

@@ -108,3 +108,103 @@ ScreenConnect backstage commands run on lab-server (via sc.py send-command):
- Contacts: Becky Kahn 520-247-1089, Michale Haubert 520-318-1040
- PROJECT_STATE.md: clients/lens-auto-brokerage/PROJECT_STATE.md (full migration plan)
- Wiki: wiki/clients/lens-auto-brokerage.md (compiled 2026-07-20)
---
## Update: 16:30 PT — Server prep and AD setup
### Session Summary (continued)
After the initial planning session, moved to execution. Created the full AD structure on LAB-SVR: OU hierarchy (LensAuto with Users/Computers/Groups sub-OUs), three security groups (DeskMan Users, DeskMan Admins, LAB-Staff), and 10 domain user accounts with temporary passwords. Created DeskMan and shares SMB shares with proper NTFS permissions matching the security groups.
Installed the Print Services role on LAB-SVR. The RICOH IM 600SR driver download from Ricoh's site (34MB) timed out twice via RMM due to the MicroServer's slow internet. Howard downloaded the driver manually and pushed it via ScreenConnect. Staged the "PCL6 Driver for Universal Print" (Ricoh Universal v4.45) and created the RICOH IM 600SR as a shared printer at `\\LAB-SVR\RICOH-IM600SR`.
Created GPO "Printers and Point-and-Print" linked to the Computers OU with all 6 Point and Print registry values configured — this is the PrintNightmare fix that prevents "Access Denied" when non-admin users connect to the print server. Howard verified all values from a PowerShell session on LAB-SVR.
Discovered network device IPs from ARP table: HP OfficeJet Pro 9010 is at 192.168.1.41 (network-capable, can be GPO-deployed), Amcrest security camera at .50, and confirmed dana's unknown workstation at .135 is an HP machine.
Researched AutoManager DeskManager: it's a FoxPro/DBF car dealership management app that does NOT need to be installed on the server — the server is just a file share. Migration is fundamentally copy files + recreate share + update amPath.ini. AutoManager also offers a cloud version (DMO) for future consideration.
Discussed profile migration approach: ForensIT User Profile Wizard (ProfWiz) remaps local profile SIDs to domain accounts so users keep their existing desktop, documents, and app settings when switching to domain logins.
### Key Decisions (continued)
- Domain-join confirmed as the approach — AD is already running, Guest SMB access to credit card data is a security issue, and this is the natural break point.
- Print server with Point and Print GPO instead of direct TCP/IP — new/reimaged machines need the driver, and the print server handles driver distribution. PrintNightmare fix via GPO whitelist.
- Cutover will be per-workstation (one at a time) not big-bang — less risk, can validate each machine before moving to the next.
- ForensIT ProfWiz for profile migration instead of fresh profiles — preserves user data and settings.
### Problems Encountered (continued)
- RICOH driver download timed out twice via RMM (34MB download, MicroServer's internet too slow for 3-5 minute timeout). Resolved by Howard downloading manually and pushing via ScreenConnect.
- GPO PowerShell script too large for RMM encoded command (>6KB limit). Sent via ScreenConnect backstage commands instead (5 sequential commands).
- Get-GPRegistryValue and Get-GPOReport consistently timed out via RMM on the MicroServer (GroupPolicy module is heavy on Xeon E-2314 with 16GB). Verified directly from PowerShell on LAB-SVR.
- Stuck z07106L24.exe from failed BITS download could not be deleted (process lock). Cleared BITS transfers but file remained locked. Will delete after next reboot.
- Here-string quoting issues when sending PowerShell scripts through RMM JSON dispatch (nested quotes, @' terminators). Workaround: use ScreenConnect for complex scripts, simple one-liners for RMM.
### Configuration Changes (continued)
**Created on LAB-SVR (via RMM remote script):**
- AD OUs: LensAuto, Users, Computers, Groups under DC=LAB,DC=lan
- AD Groups: DeskMan Users, DeskMan Admins, LAB-Staff
- AD Users: becky, dana, brian, tina, madonna, gloss, josh, turner, parke, guru (all with Welcome2LAB! must-change password)
- SMB Share: DeskMan -> C:\DeskMan (DeskMan Users=Modify, DeskMan Admins=Full)
- SMB Share: shares -> C:\shares with subdirs (LAB-Staff=Modify)
- Print Services role installed
- TCP/IP Printer Port: TCP_192.168.1.105
- Printer Driver: "PCL6 Driver for Universal Print" (Ricoh Universal PCL6 v4.45)
- Shared Printer: "RICOH IM 600SR" as RICOH-IM600SR
**Created on LAB-SVR (via ScreenConnect backstage):**
- GPO: "Printers and Point-and-Print" linked to OU=Computers,OU=LensAuto
- GPO Registry: 6 Point and Print values (Restricted, TrustedServers, ServerList, NoWarningNoElevationOnInstall, UpdatePromptSettings, RestrictDriverInstallationToAdministrators)
- GPO Registry: LegacyDefaultPrinterMode=1
**Modified:** clients/lens-auto-brokerage/PROJECT_STATE.md — updated with server prep completion status
### Commands & Outputs (continued)
RMM commands dispatched to LAB-SVR (8afb1430-c8f2-4fa2-8335-35b13d8a732f):
- AD setup script: OUs + groups + users + shares — exit 0
- Print Services install: `Install-WindowsFeature Print-Services` — Success, no reboot needed
- RICOH driver staging: `pnputil /add-driver oemsetup.inf /install` — Published as oem108.inf
- RICOH driver add: `Add-PrinterDriver -Name "PCL6 Driver for Universal Print"` — exit 0
- RICOH printer create: `Add-Printer -Name "RICOH IM 600SR" -Shared -ShareName "RICOH-IM600SR"` — exit 0
- GPO verify: `Get-GPO -All` — confirmed "Printers and Point-and-Print" exists
Printer port data from LAB-Becky (fd898f1b-fa70-4587-b827-40c03252f9b0):
- RICOH IM 600SR on USB006/USB002, HP 9010 on WSD, Brother L2350DW on WSD, Brother L2340D on USB
ARP table from LAB-MADONNA (0e845264-9b2c-4db2-aacb-96c5deac251a):
- .41 = HP (OfficeJet Pro 9010), .50 = Amcrest (camera), .105 = RICOH, .114 = Cloud Network Tech, .135 = HP (dana's machine)
### Pending / Incomplete Tasks (updated)
- [ ] Robocopy DeskMan data + C:\shares from lab-server to LAB-SVR (tonight when users off)
- [ ] Find Brother HL-L2350DW IP, assign static, add as shared printer on LAB-SVR
- [ ] Add HP OfficeJet Pro 9010 (192.168.1.41) as shared printer if feasible
- [ ] Download ForensIT ProfWiz and stage on LAB-SVR
- [ ] Identify machine at 192.168.1.135 (dana's HP workstation)
- [ ] Update LAB-SVR GuruRMM agent from 0.6.66 to 0.6.79
- [ ] Delete stuck z07106L24.exe after reboot
- [ ] Discuss hours with Len/Becky (3.75 hrs remaining, need 8-12)
- [ ] Budget Win 11 Home -> Pro for Brian's machine
- [ ] Deploy Datto EDR to LAB-DAWN, LAB-MADONNA, DESKTOP-0J55V6L, LAB-SVR
- [ ] Begin per-workstation cutover (domain join + ProfWiz + DeskMan repoint)
### Reference Information (continued)
- RICOH driver download URL: https://support.ricoh.com/bb/pub_e/dr_ut_e/0001346/0001346104/V44500/z07106L24.exe
- RICOH driver name on LAB-SVR: "PCL6 Driver for Universal Print"
- RICOH driver INF: C:\PrintDrivers\Ricoh\extracted\disk1\oemsetup.inf (published as oem108.inf)
- RICOH printer share: \\LAB-SVR\RICOH-IM600SR
- GPO name: "Printers and Point-and-Print"
- HP OfficeJet Pro 9010 IP: 192.168.1.41
- Amcrest camera IP: 192.168.1.50
- Unknown device IP: 192.168.1.114 (Cloud Network Technology)
- Dana's unknown HP workstation: 192.168.1.135 (MAC 30:13:8b:68:7d:0c)
- ForensIT User Profile Wizard: https://www.intacct.com/forensit/downloads/
- AutoManager DeskManager support: 800-300-2808, support@automanager.com
- DeskMan version: DMain.exe v11.98.0.30 (June 2023)
- Domain user temp password: Welcome2LAB! (must change at logon)
- RMM command IDs: AD setup=131413d5, print services=7c9dca51, RICOH driver=cd1ae9a7, GPO list=89daf39f