From c0d304485aa4052adc11765d698c573131d1cfcf Mon Sep 17 00:00:00 2001 From: Howard Enos Date: Wed, 8 Jul 2026 12:38:25 -0700 Subject: [PATCH] wiki: compile desert-rv-center (seed) --- wiki/clients/desert-rv-center.md | 62 ++++++++++++++++++++++++++++++++ wiki/index.md | 3 +- 2 files changed, 64 insertions(+), 1 deletion(-) create mode 100644 wiki/clients/desert-rv-center.md diff --git a/wiki/clients/desert-rv-center.md b/wiki/clients/desert-rv-center.md new file mode 100644 index 00000000..3e6556b4 --- /dev/null +++ b/wiki/clients/desert-rv-center.md @@ -0,0 +1,62 @@ +--- +type: client +name: desert-rv-center +display_name: Desert RV Center +last_compiled: 2026-07-08 +compiled_by: Howard-Home/claude-main +sources: + - clients/desert-rv-center/session-logs/2026-07/2026-07-08-howard-becky-zerotier-rdp-restore.md + - session-logs/2026-06-04-howard-syncro-billing.md +backlinks: + - lens-auto-brokerage +--- + +# Desert RV Center + +## Profile +- **Contract type:** Break-fix, plus a monthly recurring service invoice ($213.35/mo — managed/backup service line). +- **Syncro customer ID:** 19357852 +- **Location:** 86 East Redwing Lane, Huachuca City, AZ +- **Key contacts:** + - Alicia — alicia@desertrvcenter.com (primary; remote user on DESKTOP-LBO396F). Phone (verify — Syncro contact names blank). + - Additional phones on file: 520-628-7500 (QBO), 520-940-6574, 520-247-1089, 520-732-9878 (verify owners). +- **Billing rate:** ~$150/hr remote (recent break-fix labor lines); onsite (verify — likely $175/hr). +- **Hours remaining (prepaid):** none — no prepaid block (Syncro `prepay_hours` null). +- **Managed devices (Syncro assets):** 6 +- **Active ticket:** none open (as of 2026-07-08). + +## Infrastructure + +### Servers & Services +| Host | IP | Role | OS | Notes | +|---|---|---|---|---| +| DRV-BECKY | LAN 10.0.0.165 / ZeroTier 172.29.196.107 | Hyper-V VM; RDP target for remote users | Windows | Domain DESERTRV.local. Host firewall exposes ONLY 3389 (WinRM/RPC/SMB closed). RDP enabled. GuruRMM agent 921b569e-9807-4396-8e6c-53f3d1410442. ~8GB RAM. | +| DESKTOP-LBO396F | ZeroTier 172.29.254.82 | Alicia's remote workstation | Windows | Connects to DRV-BECKY via "Remote" RDP desktop shortcut over ZeroTier. GuruRMM agent 0a3f6f6e-18be-483a-b422-888c350fc2a7. | +| DESKTOP-AK2KPOB | LAN 10.0.0.189 | On-site desktop | Windows | Domain DESERTRV.local. NOT a ZeroTier member. GuruRMM agent 8605d665-f598-4d8a-8ea0-c75b57491a75. | +| (server — verify host) | (verify) | Hyper-V host / file server (VHD expanded 2026-06) | Windows Server | BECKY runs as a Hyper-V VM on a host at this site; server identity to confirm. | + +### Network +- **Domain:** DESERTRV.local +- **LAN:** 10.0.0.0/24; DNS observed at 10.0.0.182. +- **Remote access:** ZeroTier network "Desert RV" — nwid `35c192ce9b730d6e`, subnet 172.29.0.0/16 (PRIVATE). Remote users RDP into on-site machines over this overlay. + +## Access +- **RDP (remote users):** to DRV-BECKY at `172.29.196.107:3389` over ZeroTier. Local login password in vault: `clients/desert-rv-center/drv-becky-rdp.sops.yaml` (username not yet captured — verify). +- **GuruRMM:** site WEST-VALLEY-6327; enrollment key vault: `clients/desert-rv-center/gururmm-site-main.sops.yaml`. Installer: https://rmm.azcomputerguru.com/install/WEST-VALLEY-6327 +- **Vault path:** `clients/desert-rv-center/` + +## Patterns & Known Issues +- **ZeroTier is the remote-access transport.** If `ZeroTierOneService` stops on a target VM, RDP fails with **error 0x204** ("can't connect to the remote computer") even though the machine is up and RDP is healthy — the ZeroTier IP stays assigned on the adapter but nothing listens on the tunnel. Fix is to start the service; on DRV-BECKY it is now set to auto-restart on failure. +- **DRV-BECKY host firewall is locked to RDP only** (3389 open; WinRM 5985 / RPC 135 / SMB 445,139 closed, ICMP blocked). No silent remote RMM push is possible — deploy agents via ScreenConnect or an interactive RDP session. +- **DRV-BECKY reported slow** (8GB RAM VM; a svchost process observed with high cumulative CPU) — investigation pending. + +## Active Work + +*No open tickets in Syncro as of 2026-07-08. See session logs for recent work.* + +## History Highlights +- **2026-07-08** — Restored Alicia's ZeroTier RDP into DRV-BECKY: root cause was a stopped `ZeroTierOneService` (RDP error 0x204). Started the service + set auto-restart on failure; enrolled DRV-BECKY and DESKTOP-LBO396F in GuruRMM; vaulted BECKY's login. Ticket #32514 (0.5h warranty, $0.00). +- **2026-06-04** — Expanded server VHD and extended the C: partition (0.5h remote). Ticket #32298, $75.00 invoice. + +## Backlinks +- **Len's Auto Brokerage** — a Syncro contact on this account uses `becky@lensautobrokerage.com`, and the RDP VM is named DRV-BECKY; a shared-ownership/user relationship is likely (verify). diff --git a/wiki/index.md b/wiki/index.md index 4be2001b..28c367e5 100644 --- a/wiki/index.md +++ b/wiki/index.md @@ -1,6 +1,6 @@ # Wiki Index -Last updated: 2026-07-07 +Last updated: 2026-07-08 Compiled by: HOWARD-HOME/claude-main (2026-07-06: added Goldstein client article; added Reference section — client Wi-Fi inventory.) @@ -21,6 +21,7 @@ Run `/wiki-lint` to check for stale entries and broken backlinks. |---|---|---| | [Cascades of Tucson](clients/cascades-tucson.md) | Prepaid block $175/hr, **37.5 hrs remaining** (live 2026-07-01); senior living; active domain migration + HIPAA caregiver-lockdown project (GPOs deployed; Entra Hybrid Join + CA allow-list + ALIS SSO model proven); single DC (CS-SERVER) on aging R610 -- RAID **live-verified HEALTHY 2026-06-24** (the 6/15 "degraded" self-recovered; both mirrors Ok, 1:0:4 = global hot spare; consumer 320GB drives + lost-PSU-redundancy are planned follow-ups, NOT an emergency); cloud backup verified running; **Planned power outage 2026-06-23** clean self-shutdown executed + verified (bring-up ~09:00, John onsite); **Voice VLAN 30 migration COMPLETE 2026-06-19** (~38 devices: 29 Poly + 8 AudioCodes + desktop; awaiting Vertical to set Poly 5GHz-only); **UniFi RF optimized 2026-06-19** (77 U7-Pro APs/~587 clients: 2.4GHz power->Medium on 47 radios + 5GHz clean-DFS 40MHz channel plan -> 5GHz retry halved; 6GHz blocked by WPA3 on PPSK SSID); Syncro 0 open tickets (live EOD 2026-06-25), device-readiness audit done (5 PCs on Win Home need Home->Pro before join); **Alma Montt offboarded 2026-06-25** (Tenant Admin SP left holding a standing PAA role -- removal pending Mike); **CARF Technology & System Plan** deliverable in progress for Ashley Jensen; **endpoint security migration started 2026-06-25** (Datto EDR/AV replacing Bitdefender; 34 agents enrolled); **CS-SERVER: all Datto software removed 2026-06-26**, and the CS-SERVER "SMB error 67" proved to be an RMM-test artifact -- server is healthy, Karen share access verified interactively; **caregiver phone login LIVE 2026-07-01: roster reconciled to 35 (8 offboarded incl. Lassey dup, 4 new hires), two CA blockers fixed (MFA-exclude bug + compliance-block disabled), interim posture = desktops+phones on-network only; ALIS Email=UPN match + 3 new-hire ALIS records pending**; **CSC ENT->VLAN 20 migration (live 2026-07-01): 22 machines on VLAN 20 (only CS-SERVER + ~6 stragglers left on old LAN); printer shares lag at 4/15 repointed; P&P GPO still pilot-scoped**; remaining-work plan: docs/REMAINING-WORK-PLAN.md | 2026-07-01 | | [Dataforth Corporation](clients/dataforth.md) | Prepaid block ~$2,099/mo, **30.0 hrs remaining** (live 2026-07-04, 0 open tickets); signal-conditioning manufacturer; 64 DOS test stations; **new 2026-07-04: undocumented MYDATA TPSys SMT line controller (`myserver`, Fedora Core 3, VLAN2) discovered — root recovered via LILO single-user + vaulted; RMM agent ruled out (legacy glibc/kernel/no-systemd)**; test-data-chain audit 2026-07-01 (NWTOC v5.0 spec-copy gap = Syncro #32489); PBX inbound-SIP DNAT emergency fixed 2026-06-23; DFORTH-Ship 0x116 BSOD (aging G1 USDT); 2025 ransomware recovery + incomplete file restore; 2026-03 phishing + MFA; test-datasheet pipeline (Hoffman API + testdatadb on AD2); mail stack INKY->Mailprotector->EXO; shares-ACL project (all open to staff; Phase 2 strawman 2026-06-22); GuruRMM fleet ~45; Bitdefender phase-off | 2026-07-04 | +| [Desert RV Center](clients/desert-rv-center.md) | Break-fix + $213.35/mo recurring; RV dealership, Huachuca City AZ; 6 managed devices; DESERTRV.local domain (LAN 10.0.0.0/24); remote users RDP into on-site VMs over **ZeroTier** ("Desert RV" net 172.29.0.0/16); **2026-07-08: restored Alicia's RDP to DRV-BECKY** (stopped ZeroTierOneService = RDP 0x204; started + auto-restart; BECKY + DESKTOP-LBO396F enrolled in GuruRMM); DRV-BECKY firewall locked to RDP-only (no silent RMM push); BECKY slowness pending; 0 open tickets | 2026-07-08 | | [Instrumental Music Center](clients/instrumental-music-center.md) | Prepaid block $175/hr; music retail/repair; AIMsi POS on IMC1\SQLEXPRESS (SQL 2019 Std, misleading name); phantom DC (ServerIMC) slow logons; **two locations split into GuruRMM Main + MOO sites 2026-07-07** (Main 14 agents / MOO 3: BigMom, GHG12G3, IMC-LUIS); full fleet enrolled | 2026-07-07 | | [Jimmy Company](clients/jimmy.md) | Break-fix, $150/hr; single aging workstation BLASTER2 (Win10 22H2 EOL, i5-3470/3.8GB — replace); backups the recurring theme (QuickBooks data); onboarded to GuruRMM 2026-06-19 (RDP NLA + Kaseya removal + cleanup); MSP360 local backup drive full, 90-day retention set, space reclaim pending in console (cloud B2 healthy) | 2026-06-19 | | [Valley Wide Plastering](clients/valleywide.md) | Prepaid block, 15.5 hrs remaining; plastering/stucco contractor; HP DL360 Gen10 + XenServer; VWP-FILES (G:) on Hyper-V — SMB1 enabled for the legacy XP Orders VM (V-XP); VB6 app modernization project; RDWeb brute-force incident; 11 Yealink phones pending | 2026-06-23 |