azcomputerguru/claudetools
1
0
Fork 0
Code Issues 58 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from HOWARD-HOME at 2026-07-22 14:28:56

Browse Source 
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-22 14:28:56
This commit is contained in:
Howard Enos
2026-07-22 14:29:32 -07:00
parent 973f63487a
commit be4a4178af
1 changed files with 78 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

78
clients/desert-rv-center/session-logs/2026-07/2026-07-22-howard-zerotier-sc-rmm.md Normal file
View File

@@ -0,0 +1,78 @@
# Desert RV - ZeroTier Restart, ScreenConnect Consolidation, GuruRMM Install
## User
- **User:** Howard Enos (howard)
- **Machine:** Howard-Home
- **Role:** tech
## Session Summary
Restarted ZeroTier service on LAB-Becky (Len's Auto Brokerage) which had a stopped service that could not be cleanly restarted. Force-killed hung ZeroTier processes and started the service fresh. Verified two networks connected: Desert RV (172.29.188.151/16) and Len's Auto (192.168.193.130/24).
Investigated Desert RV's network to find their server. Ran network recon from DESKTOP-AK2KPOB and discovered DesertRVServer (DesertRVServer.DESERTRV.local), the Primary Domain Controller running Windows Server 2016 Essentials with DNS at 192.168.200.1 on domain DESERTRV.local. The server was not enrolled in GuruRMM.
Attempted to push ScreenConnect installer to DesertRVServer remotely from DESKTOP-AK2KPOB via RMM. Multiple approaches failed (admin shares, PS Remoting, schtasks, WMI) because the RMM agent runs as SYSTEM with no domain credentials. User session context (Nicole) had admin share access to copy files but PS Remoting, schtasks, and WMI were all blocked by either permissions or firewall. Discovered ScreenConnect was already installed and online on the server -- it was just tagged under "Len's Auto Brokerage" instead of "Desert RV Center".
Consolidated ScreenConnect tagging for all Desert RV machines. Three different company names existed: "Len's Auto Brokerage" (DESERTRVSERVER), "DRV - Desert RV" (DRV-BECKY, DRV-PARTSPC), and "Desert RV Center" (DRV-HECTOR, DRV-JEFF, DRV-TROY). Retagged all to "Desert RV Center" / "Main". Installed GuruRMM agent on DesertRVServer via ScreenConnect send-command using site code WEST-VALLEY-6327. Agent enrolled successfully (agent ID a5949435).
Diagnosed RDP connection failure (error 0x204) from DESKTOP-LBO396F to DRV-BECKY over ZeroTier. Found DRV-BECKY's ZeroTier service was stopped (same pattern as LAB-Becky). Restarted it and confirmed RDP was enabled and listening. Then discovered DESKTOP-LBO396F had ZeroTier running but was not joined to any network. Joined it to the Desert RV network (35c192ce9b730d6e), received IP 172.29.254.82. RDP connection then succeeded. Set auto-restart recovery on DRV-BECKY's ZeroTier service (Automatic startup, restart on failure at 5s/10s/30s delays). DESKTOP-LBO396F already had adequate recovery settings.
Billed 0.5h internal labor to Syncro ticket #32565 with private notes documenting all work.
## Key Decisions
- Force-killed ZeroTier processes on LAB-Becky rather than continuing to debug the hung Restart-Service -- the service was stuck in a state where it couldn't be stopped cleanly.
- Chose ScreenConnect send-command to install GuruRMM on DesertRVServer after all remote execution paths from the workstation (PS Remoting, schtasks, WMI) failed due to SYSTEM context / firewall restrictions. SC was already installed and online -- the fastest path.
- Standardized all Desert RV ScreenConnect sessions under "Desert RV Center" (CP1) rather than keeping any of the legacy names.
- Set ZeroTier service recovery to auto-restart on failure (not just Automatic startup) to prevent recurrence of the stopped-service pattern seen on both LAB-Becky and DRV-BECKY.
## Problems Encountered
- LAB-Becky ZeroTier service was hung and could not be stopped via Restart-Service. Resolved by force-killing ZeroTier processes and starting fresh.
- Remote execution to DesertRVServer from DESKTOP-AK2KPOB failed across all methods (admin shares worked for file copy but PS Remoting, schtasks /Create, and WMI Process Create all returned Access Denied). Root cause: RMM agent runs as SYSTEM with no domain credentials; Nicole's user session had share access but not remote management permissions on the server. Resolved by discovering SC was already installed.
- DESKTOP-LBO396F RDP error 0x204 to DRV-BECKY had two causes: (1) DRV-BECKY's ZeroTier service was stopped, and (2) DESKTOP-LBO396F was not joined to the Desert RV ZeroTier network at all (listnetworks was empty). Both fixed.
## Configuration Changes
- DesertRVServer: GuruRMM agent installed (site WEST-VALLEY-6327, agent ID a5949435-66c8-4f58-9eff-fe8a3139b825)
- ScreenConnect: DESERTRVSERVER retagged CP1 "Len's Auto Brokerage" -> "Desert RV Center", CP2 "Main"
- ScreenConnect: DRV-BECKY retagged CP1 "DRV - Desert RV" -> "Desert RV Center", CP2 "Main"
- ScreenConnect: DRV-PARTSPC retagged CP1 "DRV - Desert RV" -> "Desert RV Center", CP2 "Main"
- DRV-BECKY: ZeroTier service set to Automatic startup + failure recovery (restart at 5s/10s/30s, 24h reset)
- DESKTOP-LBO396F: Joined to ZeroTier network 35c192ce9b730d6e (Desert RV)
- LAB-Becky: ZeroTier service restarted (was hung/stopped)
## Infrastructure & Servers
- **DesertRVServer** -- Windows Server 2016 Essentials, PDC for DESERTRV.local, DNS 192.168.200.1, LAN 10.0.0.182, Intel i7-3930K, 32GB RAM
- **DESKTOP-AK2KPOB** -- Desert RV workstation, LAN 10.0.0.189, Wi-Fi, user Nicole logged in
- **DESKTOP-LBO396F** -- Desert RV workstation, Wi-Fi 192.168.1.12, ZeroTier 172.29.254.82
- **DRV-BECKY** -- Desert RV workstation, LAN 10.0.0.165, ZeroTier 172.29.196.107
- **LAB-Becky** -- Len's Auto Brokerage, ZeroTier 172.29.188.151 (Desert RV network), 192.168.193.130 (Len's Auto network)
- Desert RV ZeroTier network ID: 35c192ce9b730d6e
- Desert RV domain: DESERTRV.local
- Desert RV default gateway: 10.0.0.1
- GuruRMM site code: WEST-VALLEY-6327
## Credentials & Secrets
- DRV-BECKY RDP credentials in vault: `clients/desert-rv-center/drv-becky-rdp.sops.yaml` -- username field says "UNKNOWN - update when confirmed", password is `Token1225*`
## Pending / Incomplete Tasks
- DRV-BECKY vault entry username needs to be confirmed and updated
- DesertRVServer has no RDP/login credentials in the vault -- should be captured when known
- Investigate why ZeroTier service keeps stopping on multiple Desert RV machines (pattern seen on LAB-Becky, DRV-BECKY, and DESKTOP-LBO396F was not joined at all)
## Reference Information
- Syncro ticket: #32565 (ID 114023383) -- https://computerguru.syncromsp.com/tickets/114023383
- ScreenConnect session IDs:
- DESERTRVSERVER: 8b95beec-e3d2-4622-bd11-ac1799aef14f
- DRV-BECKY: d8c9de4a-348d-4c3a-b266-a8e57b5aae04
- DRV-PARTSPC: 16348899-f420-4294-a6c9-80faa1216955
- GuruRMM agent IDs:
- DesertRVServer: a5949435-66c8-4f58-9eff-fe8a3139b825
- DESKTOP-AK2KPOB: 8605d665-f598-4d8a-8ea0-c75b57491a75
- DESKTOP-LBO396F: 0a3f6f6e-18be-483a-b422-888c350fc2a7
- DRV-BECKY: 921b569e-9807-4396-8e6c-53f3d1410442