sync: auto-sync from HOWARD-HOME at 2026-06-20 07:34:29

Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-20 07:34:29
This commit is contained in:
2026-06-20 07:35:10 -07:00
parent 4c51be5a6d
commit ddf17454c2
8 changed files with 240 additions and 41 deletions

View File

@@ -1,42 +1,73 @@
# Client Overview
Khalsa Montessori School (Syncro customer 9456554). Also referred to by the
client as "Khalsa Family Services" / "Khalsa Schools". Fish-named servers
(TROUT, SALMON). Two sites: Camden and River.
## Company Name
Khalsa
Khalsa Montessori School
## Primary Contact
- Name:
- Name: Celeste Duitman (Khalsa Family Services)
- Phone:
- Email:
- Note: 2026-06-19 asked whether the "Trout server" can be retired (it used to host
Schoolmaster, now archived). Answer: no, not as-is — TROUT is the live DC/DNS/file/
QuickBooks server. See servers/camden/TROUT.md.
## IT Contact
- Name:
- Phone:
- Email:
## IT / Billing Contacts (from Syncro)
- lulu.camacho@khalsaschools.org (asset contact on Syncro account)
## Contract Details
- Service Level:
- Hours Covered:
- Contract Renewal Date:
- Service Level: (not documented)
- Hours Covered: (not documented)
- Contract Renewal Date: (not documented)
## Environment Summary
- Total Users:
- Total Locations: 2
- Domain Name:
- RMM Agent Count:
- Workstation Count:
- Server Count:
## Environment Summary (live data 2026-06-19)
- Total Users: (not documented)
- Total Locations: 2 (Camden, River)
- Domain Name: khalsa.local (Camden DC = TROUT @ 10.11.12.254)
- Network: 10.11.12.0/22 (Camden 10.11.12.x, River 10.11.14.x); gateway 10.11.12.1
- Site WAN egress: 50.145.145.190
- Remote access: ScreenConnect (computerguru.screenconnect.com) + Splashtop; Syncro RMM agents
- Site-to-site VPN to ACG (172.16.50.x): documented but BROKEN ("VPN routing issue") — on-net IPs not reachable from ACG; manage via ScreenConnect/Syncro
- Server Count: 3 known (2 live + 1 offline)
- RMM/Workstation Count: ~20 Syncro device assets (see Inventory)
## Servers
| Host | Site | IP | OS | Role | Status |
|------|------|----|----|------|--------|
| TROUT | Camden | 10.11.12.254 | WS2016 Std | DC + DNS + file (K:) + QuickBooks | ONLINE |
| SALMON | River | 10.11.14.76 | WS2016 Std | Standalone file/QuickBooks (River) | ONLINE |
| KHALSADC2 | ? | ? | WS2016 Eval | Intended 2nd DC | OFFLINE since 2025-08 |
See servers/camden/TROUT.md, servers/river/SALMON.md, servers/camden/KHALSADC2.md.
## Workstation/Device Inventory (Syncro, 2026-06-19)
~20 Syncro device assets incl.: DESKTOP-MAN1CGE, DESKTOP-RKKR9KN, DESKTOP-M45ARIN,
LAPTOP-NIBQP9LG, LAPTOP-JCSPNNA5, LAPTOP-AGN1DMAR, LAPTOP-KJJB0R90, KMS-LT11-1,
KMS-LT11-2, KHALSA-R-LT1, KHALSA-R-LT2, UE-DONAGHY-L, PRIME-RTG-PC, AD-KHALSA-D-FRO,
CAM-LULU-D, DESKTOP-9LT4ICC, AD-JANICE-D, CAM-STAFFROOM-D.
## Locations
### Camden
- Address:
- Phone:
- Primary Use:
- Primary Use: Main office; hosts TROUT (DC/DNS/QuickBooks/file)
### River
- Address:
- Phone:
- Primary Use:
- Primary Use: Second site; hosts SALMON (standalone file/QuickBooks)
## Key Risks / Open Items
- TROUT C: drive at 10% free (12 GB) — low-disk risk.
- No DC redundancy: TROUT is the only live DC (KHALSADC2 offline). TROUT failure = outage.
- No backup configuration captured for any server — VERIFY backups exist.
- Windows Defender is the only AV on servers.
- Onboarding still incomplete: M365/Azure, contacts (phones/emails), contract terms,
backup, and per-server share/app detail not yet captured.
## Notes
<!-- General notes about this client -->
Data captured via Syncro asset API + ScreenConnect session telemetry on 2026-06-19.
On-box live audit still needed to itemize TROUT's shares/folders and installed software.

View File

@@ -0,0 +1,31 @@
# Server: KHALSADC2
> Source: live data from Syncro asset 10778071 (Khalsa Montessori School), captured
> 2026-06-19. STALE — agent has not reported since 2025-08-19.
## General Info
- Hostname: KHALSADC2
- IP Address: unknown (not captured)
- OS: Microsoft Windows Server 2016 Standard **Evaluation** (unlicensed eval build)
- Physical / Virtual: Physical (whitebox — "To Be Filled By O.E.M.")
- Location: unknown (named as second DC; presumed Camden)
- Last boot: 2025-07-09
- Last Syncro report: 2025-08-19
- Status: **OFFLINE / not reporting since mid-2025** — abandoned or decommissioned
## Hardware
- Make/Model: whitebox / OEM-unfilled
- CPU: Intel Core i5-4430 @ 3.00 GHz (desktop-class)
- RAM: 8 GB
- Storage: Samsung SSD 850 EVO 500 GB + a 57 GB SanDisk USB stick
## Roles and Services
- Intended as a **second domain controller** ("DC2") for khalsa.local, added ~Feb 2025.
- Appears to have been a temporary/eval DC that was never finished or was retired.
It is NOT providing AD redundancy today.
## Significance
- Because KHALSADC2 is offline, **TROUT is the only functioning DC** for khalsa.local.
The domain currently has no DC redundancy — a TROUT failure = full network/login outage.
- If this box still physically exists and is recoverable, it is a poor candidate for a
permanent DC (eval license, desktop CPU, USB-stick storage). Plan a proper replacement.

View File

@@ -0,0 +1,70 @@
# Server: TROUT
> Source: live data from Syncro asset 2294092 + ScreenConnect session "TROUT"
> (Khalsa Montessori School), captured 2026-06-19. Roles marked [confirmed] are
> from agent telemetry; roles marked [indicated] are inferred from support-ticket
> history and need on-box confirmation via a live audit.
## General Info
- Hostname: TROUT
- IP Address: 10.11.12.254 (static; /22 mask 255.255.252.0 -> 10.11.12.0/22)
- Public IP (site WAN): 50.145.145.190
- OS: Microsoft Windows Server 2016 Standard
- OS Version: build 14393.6981 (release 1607)
- Physical / Virtual: Physical (reports a Dell Virtual Disk via PERC; bare-metal box)
- Location: Camden ("Camden server")
- Domain: khalsa.local (this host IS the domain)
- DNS config: dns1 = 127.0.0.1 (self), dns2 = 10.11.12.254 (self); gateway 10.11.12.1
- Last boot: 2026-03-11
- Status: ONLINE (agent heartbeat 2026-06-19)
## Hardware (physical)
- Make/Model: Dell PowerEdge T110 II
- Serial / Service Tag: 1V20R22
- CPU: Intel Xeon E31220 @ 3.10 GHz (4 threads)
- RAM: 16 GB (2x 8 GB)
- Storage: 1x Dell Virtual Disk (PERC), 931 GB raw
- Note: ~2012-era hardware, aging
## Disk Usage (2026-06-19)
- C: (system): 120 GB total, **12 GB free (10% free)** — CRITICALLY LOW
- All fixed disks: 927 GB total, 437 GB free (47% free)
- Total used: ~490 GB; data volume (D:) holds ~380 GB of files
## Roles and Services
- [x] Domain Controller [confirmed] — sole functioning DC for khalsa.local (KHALSADC2 offline since mid-2025)
- [x] DNS Server [confirmed] — primary DNS for both sites (PCs at River also point here)
- [ ] DHCP Server — unconfirmed (gateway 10.11.12.1 may serve DHCP; verify on-box)
- [x] File Server [indicated] — users map a **K: drive** (tickets #32016)
- [x] Application Server / QuickBooks host [indicated] — QuickBooks company files
(tickets #31904 "Camden server can't get on QBs after power outage", #32047
"move QBs from Camden to River")
- [ ] Print Server — unconfirmed
- [ ] Database Server — unconfirmed (legacy Schoolmaster + SQL removed per client; verify no SQL remains)
- [ ] Backup Target — unconfirmed
- [ ] RDS / Terminal Server — unconfirmed
- [ ] Hyper-V Host — unconfirmed
## History / Schoolmaster
- Formerly hosted **Schoolmaster** (school management app). Per Celeste Duitman
(Khalsa Family Services, 2026-06-19) Schoolmaster is no longer used and has been
archived. TROUT has since taken on DC/DNS/file/QuickBooks duties, so it CANNOT be
removed as-is despite Schoolmaster being gone.
## AV / Security
- AV: Windows Defender only
- Local admin account: kms-admin (last interactive); KHALSA\guru also used
## Decommission notes
To retire TROUT you must first migrate its live roles:
1. Promote a replacement DC + DNS (SALMON, a new box, or move to M365/Entra) — there
is currently NO healthy second DC.
2. Move file shares (K:) and QuickBooks data to the replacement.
3. Transfer FSMO roles + DNS, demote TROUT, then power off.
This is a planned migration, not an unplug. Age + near-full C: make retirement sensible.
## Remaining unknowns (need live on-box audit)
- Exact share list + per-folder sizes on D:
- Full installed-software list (confirm no SQL/Schoolmaster remnants)
- Whether DHCP/print roles run here
- Backup status (no backup configuration captured)

View File

@@ -0,0 +1,46 @@
# Server: SALMON
> Source: live data from Syncro asset 6746237 (Khalsa Montessori School), captured
> 2026-06-19. Role is inferred (standalone server, not a DC) and needs on-box
> confirmation via a live audit.
## General Info
- Hostname: SALMON
- IP Address: 10.11.14.76 (DHCP; /22 mask 255.255.252.0 -> 10.11.12.0/22)
- Public IP (site WAN): 50.145.145.190 (same egress as TROUT in telemetry)
- OS: Microsoft Windows Server 2016 Standard
- OS Version: build 14393.6796 (release 1607)
- Physical / Virtual: Physical
- Location: River (10.11.14.x subnet)
- Domain: NOT domain-joined (domain field blank; last login SALMON\kms-admin = local account)
- DNS config: dns1 = 10.11.12.254 (TROUT), dns2 = 10.11.12.1; gateway 10.11.12.1; DHCP server 10.11.12.1
- Last boot: 2026-03-25
- Status: ONLINE (agent heartbeat 2026-06-19)
## Hardware (physical)
- Make/Model: Dell PowerEdge T130
- Serial / Service Tag: 8Z8FPD2
- CPU: Intel Xeon E3-1220 v5 @ 3.00 GHz
- RAM: 8 GB
- Storage: 2x Toshiba DT01ACA050 (465.76 GB each; likely mirrored)
## Disk Usage (2026-06-19)
- C: (system): 463 GB total, 239 GB free (51% free)
- All fixed disks: 929 GB total, 608 GB free (65% free)
- Total used: ~321 GB
## Roles and Services
- [ ] Domain Controller — NO (standalone/workgroup)
- [ ] DNS Server — NO (uses TROUT for DNS)
- [x] File Server [indicated] — likely the River-site file/QuickBooks server
(ticket #32047 "move QBs from Camden to River"); ~321 GB of data present
- Other roles unconfirmed — needs live audit
## AV / Security
- AV: Windows Defender only
- Local admin account: kms-admin
## Notes
- Most likely candidate to absorb TROUT's file/QuickBooks data in a TROUT
decommission, OR to be promoted to a domain controller. Has ~600 GB free.
- Naming convention: Khalsa servers are fish-named (TROUT, SALMON).