sync: auto-sync from HOWARD-HOME at 2026-05-27 13:04:06

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-27 13:04:06

session-logs/2026-05-27-howard-session.md

@@ -189,3 +189,73 @@ c347c6b  fix(agent): persisted device ID wins over hardware ID to prevent factor
 - Sif-Laptop554 new agent ID: `ce868d0f` | new device_id: `win-f0fae6b3-3dc8-4905-81f2-e63ead4741e3`
 - Sif-Laptop555 agent ID: `acb14901` | device_id: `win-83e84dca-0cac-4a02-83c7-5b13c2a85aea`
 - Syncro customer: `https://computerguru.syncromsp.com/customers/7694718`
+
+---
+
+## Update: ~11:30 PT — Sif Ticket Billing + Cascades Printing + Chris Knight
+
+### Summary
+
+Closed out billing on three tickets and created Chris Knight's accounts at Cascades.
+
+**Sif-oidak ticket #32168 ("Estimate - 2 x office laptops"):** Added a setup resolution comment documenting machine names (Sif-Laptop554, Sif-Laptop555), username Sif / password SifSif on sticky note, and GuruRMM installation. Billed 1hr in-shop labor (setup/naming) and 1hr internal labor (GuruRMM device_id fix work). Both line items added via `add_line_item`. Sif-oidak is prepaid — invoices showed $0.00 with prepay deduction annotations. Prepay block decremented by 2.0 hrs total.
+
+**Cascades printing ticket #32331 ("Printing Issues - Alma Montt"):** Created new ticket for Alma Montt printing issue (resolved). Billed 0.5h remote labor via `add_line_item` (product 1190473). Cascades is prepaid — prepay balance 28.0 → 27.5 hrs. Sent bot alert to #bot-alerts.
+
+**Cascades Chris Knight ticket #32332 ("New User - Chris Knight"):** Created ticket and billed 0.5h remote labor for user account creation. Prepay 27.5 → 27.0 hrs.
+
+**Chris Knight M365 account:** Created `c.knight@cascadestucson.com` via Graph API (user-manager tier, Cascades tenant 207fa277). O365 Business Premium SKU was suspended (grace period) — used Microsoft 365 Business Premium (SPB, cbdc14ab-d96c-4c30-b9f4-6ada7cdc1d46) which had 31 available seats. Added to SG-SSPR-Eligible (same groups as Lauren Hasselman — only group she was in). OU placement not applicable for cloud-only object.
+
+**Chris Knight AD account:** Created `c.knight@cascadestucson.com` on cascades.local via GuruRMM PowerShell command dispatched to CS-SERVER agent (6766e973). OU: `OU=Administrative,OU=Departments,DC=cascades,DC=local` (no Accounting OU exists; Administrative is where accounting staff land per Cascades OU structure). UPN suffix `cascadestucson.com` confirmed as registered UPN suffix in AD. Temp password set; user must change on first login.
+
+**Credentials delivered to Howard** for relay to Meredith:
+- Email: c.knight@cascadestucson.com
+- Temp password: (provided in session — not logged here; vault if needed)
+- Must change password at first login
+
+**O365BP suspension flagged:** Noted to Howard that the O365 Business Premium subscription at Cascades appears suspended (31 users on grace period). Needs Mike to check M365 admin center and confirm whether renewal/assignment is needed before grace period expires.
+
+### Key Decisions
+
+- **SPB over O365BP for Chris Knight license:** O365BP was suspended; SPB was the active subscription with available seats. Used SPB rather than blocking on the suspended SKU.
+- **Administrative OU for accounting staff:** No dedicated Accounting OU exists at Cascades. Administrative OU is the correct placement for office/accounting staff per existing user pattern.
+- **SG-SSPR-Eligible only:** Matched Lauren Hasselman's exact group membership — only security group she was in. Per Cascades security group rule, no additional groups added without explicit confirmation.
+
+### Problems Encountered
+
+- **O365 Business Premium suspended:** Could not assign to new user. Identified SPB as the correct active subscription. Flagged suspension to Howard for Mike to investigate.
+- **python3 not on PATH on Windows:** `curl | python3` pipes failed. Switched to PowerShell `Invoke-RestMethod` and grep/sed patterns for API calls.
+
+### Configuration Changes
+
+None to the codebase. User accounts created in external systems (M365 tenant, cascades.local AD).
+
+### Credentials & Secrets
+
+- **Chris Knight M365 / AD:** c.knight@cascadestucson.com | temp password given to Howard for relay — vault under `clients/cascades-tucson/` if needed
+- **Cascades prepay balance after this session:** ~27.0 hrs (started at 28.0; -0.5 printing, -0.5 Chris Knight account)
+
+### Infrastructure & Servers
+
+- **Cascades M365 tenant:** 207fa277-e9d8-4eb7-ada1-1064d2221498 | SPB subscription: cbdc14ab-d96c-4c30-b9f4-6ada7cdc1d46
+- **CS-SERVER GuruRMM agent:** 6766e973-e703-47c1-be56-76950290f87c (used to dispatch AD account creation)
+- **O365BP subscription status:** SUSPENDED — 31 users on grace period (flag for Mike)
+
+### Pending / Incomplete Tasks
+
+- **O365BP suspension at Cascades:** Mike needs to check M365 admin center; 31 users may lose access when grace period expires.
+- **Vault Chris Knight credentials:** Temp password not yet vaulted — should go under `clients/cascades-tucson/`.
+- **SIF-Laptop555 hostname:** Record acb14901 still shows "Sif-Laptop554" — auto-corrects on next heartbeat.
+- **New GuruRMM agent binary (51a7e6c):** Needs CI build and deploy; Mike handling.
+- **localadmin on SIF laptops:** Password unknown; set it so UAC prompts work for "Sif" standard user, then vault.
+- **Make localadmin selectable at Windows login screen** on both SIF laptops.
+- **MAINTENANCE-PC agent:** Still on v0.6.27; LHM fix pending agent binary update.
+
+### Reference Information
+
+- Sif ticket: `https://computerguru.syncromsp.com/tickets/32168`
+- Cascades printing ticket: `https://computerguru.syncromsp.com/tickets/32331`
+- Cascades Chris Knight ticket: `https://computerguru.syncromsp.com/tickets/32332`
+- Cascades customer: `https://computerguru.syncromsp.com/customers/7502279`
+- Chris Knight M365 object ID: (recorded in Graph at time of creation)
+- Cascades SPB subscription: `cbdc14ab-d96c-4c30-b9f4-6ada7cdc1d46`