sync: auto-sync from HOWARD-HOME at 2026-04-22 11:22:39
Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-04-22 11:22:39
This commit is contained in:
@@ -4,67 +4,4 @@ Check this file at sync. Delete items after you've addressed them.
|
||||
|
||||
---
|
||||
|
||||
## From Mike, 2026-04-22 — RE: intune-manager vault file + Syncro rates
|
||||
|
||||
**intune-manager SOPS file:** It's there — your vault is just 2 commits behind. Pull the vault repo and you'll have it:
|
||||
|
||||
```
|
||||
ebdd711 feat: add ComputerGuru Intune Manager app credentials
|
||||
1c837ba fix: re-encrypt intune-manager vault entry with correct SOPS config
|
||||
```
|
||||
|
||||
```bash
|
||||
cd ~/vault && git pull
|
||||
```
|
||||
|
||||
**Syncro labor rates:** Look in Syncro for rates, I don't know them off hand.
|
||||
|
||||
---
|
||||
|
||||
## From Mike, 2026-04-21 — RE: Syncro labor rates + vault.sh fix
|
||||
|
||||
**Rates:** Syncro auto-calculates from the product's configured rate — no hardcoding needed. I've updated syncro.md to reflect this: omit `price_retail` entirely and Syncro fills it from the product. Your $175 ticket is fine; that's what the product is set to.
|
||||
|
||||
**vault.sh MSYS path bug:** Already patched and pushed before you reported it — same fix you described (jq-first, cygpath -m fallback for Python). Should work on HOWARD-HOME now. Pull and test.
|
||||
|
||||
---
|
||||
|
||||
## From Mike, 2026-04-21 — RE: Intune Manager Added to Remediation Tool
|
||||
|
||||
**New tier available:** `intune-manager` — 7th remediation-tool tier now operational.
|
||||
|
||||
**What it enables:**
|
||||
- Device inventory and status checks
|
||||
- Compliance policy queries
|
||||
- App deployment verification
|
||||
- Configuration profile audits
|
||||
- Privileged operations (wipe/lock/retire devices)
|
||||
|
||||
**How to use:**
|
||||
```bash
|
||||
# Acquire Intune token (works on any tenant where app is consented)
|
||||
bash .claude/skills/remediation-tool/scripts/get-token.sh <tenant-id> intune-manager
|
||||
|
||||
# Or invoke via /remediation-tool command
|
||||
# Claude will automatically use this tier for Intune-related tasks
|
||||
```
|
||||
|
||||
**Graph API permissions (all active):**
|
||||
- DeviceManagementManagedDevices.Read.All
|
||||
- DeviceManagementManagedDevices.ReadWrite.All
|
||||
- DeviceManagementManagedDevices.PrivilegedOperations.All
|
||||
- DeviceManagementConfiguration.ReadWrite.All
|
||||
- DeviceManagementApps.ReadWrite.All
|
||||
- DeviceManagementRBAC.Read.All
|
||||
- DeviceManagementServiceConfig.ReadWrite.All
|
||||
|
||||
**Vault file:** Already synced to all machines at `msp-tools/computerguru-intune-manager.sops.yaml`
|
||||
|
||||
**Use cases for you:**
|
||||
- Setting up Intune features via Claude
|
||||
- Device compliance checks
|
||||
- iPad enrollment status (Cascades kitchen iPads)
|
||||
- App deployment verification
|
||||
- MDM certificate renewals
|
||||
|
||||
Let me know if you need any Intune-specific scripts added to the toolkit.
|
||||
_No active messages._
|
||||
|
||||
@@ -4,4 +4,10 @@ Check this file at sync. Delete items after you've addressed them.
|
||||
|
||||
---
|
||||
|
||||
<!-- addressed 2026-04-22: vault pull instructions + rates reply sent to Howard -->
|
||||
## From Howard, 2026-04-22 — Ack: intune-manager + rates
|
||||
|
||||
Pulled vault (got `ebdd711` + `1c837ba`). intune-manager vault file loads fine now. Tried a token against grabblaw.com — returns `AADSTS700016` (app not consented in that tenant). Same category as the `defender` case, tenant-onboarding work, not a code bug. No action needed from you.
|
||||
|
||||
Rates reply on Syncro — understood, will omit `price_retail` going forward. Saw the syncro.md update.
|
||||
|
||||
Good luck with Valleywide — saw the NVRAM corruption log. Holler if you need a hand with anything from here.
|
||||
|
||||
Reference in New Issue
Block a user