diff --git a/wiki/clients/putt-land-surveying.md b/wiki/clients/putt-land-surveying.md new file mode 100644 index 0000000..d4490ed --- /dev/null +++ b/wiki/clients/putt-land-surveying.md @@ -0,0 +1,113 @@ +--- +type: client +name: putt-land-surveying +display_name: PUTT LAND SURVEYING, INC. +last_compiled: 2026-06-10 +compiled_by: GURU-BEAST-ROG/discord-bot +sources: + - clients/putt-land-surveying/session-logs/2026-06/2026-06-10-discord-bot-dns-wipe-investigation.md +backlinks: [] +--- + +# PUTT LAND SURVEYING, INC. + +## Profile + +- **Syncro ID:** 7180175 +- **Contract type:** Managed services — $223.92/mo recurring (from 2026-01-01) +- **Managed devices:** 7 (PLS-SERVER, PLS-FRONT, PLS-ONE, PLS-TWO, PLS-THREE, PLS-FOUR, PLS-LAPTOP) +- **Billing rate:** $175/hr onsite; $150/hr remote (verify) +- **Key contacts:** + - Paul Cote — primary contact (new ownership as of 2026-01); pcote@puttsurveying.com + - R. Phillips — rphillips@puttsurveying.com; 503-998-6264 + - Jill — jillkp@cox.net (cc'd on invoices) + - Katherine Brackett — VPN/remote access user + - Tristan Boren — tboren@puttsurveying.com (new hire, onboarded 2026-01-30) +- **Office:** 4817 East 5th Street, Tucson, AZ 85711 +- **Phone:** 520-240-8373 (main), 520-240-2423 (secondary) +- **Active tickets:** #32404 (open), #31865 (open — likely resolved, status not updated) + +## Infrastructure + +### Servers & Services + +| Host | IP | Role | OS | Notes | +|---|---|---|---|---| +| PLS-SERVER | (verify) | On-site server | (verify) | | +| PLS-FRONT | (verify) | Front-desk workstation | (verify) | | +| PLS-ONE | (verify) | Workstation | (verify) | | +| PLS-TWO | (verify) | Workstation | (verify) | | +| PLS-THREE | (verify) | Workstation | (verify) | | +| PLS-FOUR | (verify) | Workstation | (verify) | | +| PLS-LAPTOP | (verify) | Laptop | (verify) | New hardware, set up Dec 2025 | + +### Email & Identity + +- **M365 tenant:** (verify — tenant ID: 25008634-91b4-40aa-8113-78ea03826156) +- **Tenant display name:** Putt Land Surveying Inc +- **Namespace type:** Managed (direct M365, not GoDaddy-federated) +- **Mailboxes:** 8 cloud-only mailboxes (no on-premises sync) as of 2026-06-10 +- **Licenses:** 2x Microsoft 365 Business Basic, 5x Microsoft 365 Business Premium +- **MX target:** puttsurveying-com.mail.protection.outlook.com +- **SPF:** v=spf1 include:spf.protection.outlook.com -all +- **Autodiscover CNAME:** autodiscover.outlook.com +- **Email security:** M365-native only — no Mailprotector, not in CloudFilter +- **MFA status:** (verify) +- **Remediation tools:** Onboarded 2026-06-10 — all 5 apps consented (Security Investigator, Exchange Operator, User Manager, Tenant Admin, Defender Add-on) + +### Domain & DNS + +- **Domain:** puttsurveying.com +- **Registrar:** GoDaddy (Wild West Domains LLC) — NOT in ACG's GoDaddy account +- **Nameservers:** ns45/ns47/ns48.domaincontrol.com +- **Domain expiry:** 2031-01-31 +- **Domain locks:** clientDeleteProhibited, clientRenewProhibited, clientTransferProhibited, clientUpdateProhibited +- **Website hosting:** GoDaddy shared hosting — correct A record: 50.63.7.186 +- **[WARNING] DNS wipe event 2026-06-09:** All DNS records deleted (MX, SPF, autodiscover CNAME, website A record). DNS serial 2026060900 confirmed. Current A records pointing to GoDaddy parking IPs (15.197.148.33, 3.33.130.190). Email and website down as of 2026-06-10. Remediation in progress per ticket #32404. + +### Network + +- **ISP / WAN:** (verify) +- **Firewall:** (verify) +- **VPN:** Configured for select users (Katherine Brackett set up Nov 2025 for AA Project remote access) + +## Access + +- **RDP:** (verify) +- **Admin URL:** (verify) +- **Vault path:** clients/putt-land-surveying/ (not vaulted — domain in client's own GoDaddy account) + +## Patterns & Known Issues + +- **Email/Outlook failures are recurring.** Aug 2025: emergency Outlook login failure after update. Jun 2026: full DNS wipe took down email and website. +- **DNS/domain not ACG-managed.** puttsurveying.com is registered under the client's own GoDaddy account. ACG has no direct control; changes require client coordination or delegation. +- **No Mailprotector / no third-party email security.** Email protection is M365-native only; no CloudFilter presence. +- **New hardware cycles.** Two rounds of new machine setup in 2025 (Sept upgrades to Win11, Dec new laptop setup). Expect ongoing hardware refresh work. +- **M365 user provisioning is periodic.** New hire onboarding, email address creation, and VPN/remote access setup recur as the company grows or turns over staff. +- **Ownership transition in progress.** New ownership discussed Sept 2025; primary contact shifted to Paul Cote (pcote@puttsurveying.com) by Jan 2026. Old address pls@puttsurveying.com retired 2026-02-01. +- **GoDaddy shared hosting for website.** Not ACG-managed hosting; website changes require GoDaddy account access. + +## Active Work + +- **Ticket #32404 [Waiting on Customer] — puttsurveying.com DNS wipe / no MX / email down** (opened 2026-06-10). All DNS records were deleted 2026-06-09. Correct records identified (MX, SPF, autodiscover CNAME, website A record 50.63.7.186). Blocked on client providing GoDaddy account access to restore records. Remediation tools onboarded to M365 tenant same day. +- **Ticket #31865 [Customer Reply] — New hire email (@puttsurveying.com)** (opened 2026-01-28). Tristan Boren (tboren@puttsurveying.com) provisioned 2026-01-30 per ticket comments. Appears resolved; status not updated in Syncro. + +## History Highlights + +- **2025-01-03** — Laptop x2 desktop setup (ticket #30576) +- **2025-04-28** — Remote: intermittent connectivity and OneDrive error investigation (ticket #31035) +- **2025-08-04** — Emergency remote: Outlook login failure after update; all email inaccessible (ticket #31362) +- **2025-08-18** — Remote: printer setup for Jill (ticket #31403) +- **2025-09-03** — New email address set up (ticket #31439) +- **2025-09-17** — Onsite: two machines upgraded to Windows 11; data backed up; new company ownership discussed (ticket #31471) +- **2025-11-05** — Remote: VPN and remote access configured for Katherine Brackett for AA Project (ticket #31627) +- **2025-12-22** — Onsite: new computer setup (ticket #31750) +- **2025-12-29** — Onsite: file copy and transfer to new computer (ticket #31767) +- **2026-01-01** — Managed services contract billing began at $223.92/mo +- **2026-01-28 to 2026-01-30** — New hire Tristan Boren onboarded; tboren@puttsurveying.com provisioned; primary contact updated to Paul Cote (pcote@puttsurveying.com); pls@puttsurveying.com retired 2026-02-01 (ticket #31865) +- **2026-06-09** — All DNS records for puttsurveying.com wiped (serial 2026060900); email and website taken down +- **2026-06-10** — DNS wipe confirmed; correct records identified; M365 tenant onboarded to ACG remediation tools (ticket #32404) + +## Backlinks + +*(none)* diff --git a/wiki/index.md b/wiki/index.md index c3c1917..5056206 100644 --- a/wiki/index.md +++ b/wiki/index.md @@ -1,7 +1,7 @@ # Wiki Index Last updated: 2026-06-10 -Compiled by: Mikes-MacBook-Air/claude-main +Compiled by: GURU-BEAST-ROG/discord-bot This wiki is LLM-maintained. Do not edit articles manually — run `/wiki-compile` to update. Run `/wiki-lint` to check for stale entries and broken backlinks. @@ -53,6 +53,7 @@ Run `/wiki-lint` to check for stale entries and broken backlinks. | [Sif-oidak District - Tohono O'odham Nation](clients/sif-oidak.md) | Tribal government; SifOidak.local AD domain; SIF-SERVER (primary DC) + SIF-SERVER2 + 2 laptops GuruRMM enrolled; M365 sifoidak.onmicrosoft.com onboarded 2026-06-03 (all 4 ACG MSP apps; 11/11 seats); not yet in CIPP; Syncro 7694718 | 2026-06-03 | | [Starr Pass Realty](clients/starr-pass.md) | Real estate; Syncro 153298; flat-rate ~$92.93/mo; starrpass.com M365 tenant (222450dd) onboarded 2026-06-10; sole M365 user sysadmin@starrpass.com (Brian Shinn); DNS on ACG IX; legacy Neptune mailbox cansley@devconllc.com; 2 Syncro assets | 2026-06-10 | | [Universal Minerals International](clients/universal-minerals.md) | Minerals/commodities, Tucson AZ; Syncro 34844920; **break-fix, no prepaid/RMM**; CyndyOffice (HP Pavilion TP01, Win11 Home, QuickBooks Enterprise 22.0) intermittent hard-freeze (Kernel-Power 41, no dump = hardware/firmware) — BIOS F.38 + Fast Startup off + memtest passed 2026-06-10, PSU prime remaining suspect; QB messaging crash-loop repaired; ticket #32397 monitoring; temporary diagnostic RMM agent removed same-day | 2026-06-10 | +| [Putt Land Surveying](clients/putt-land-surveying.md) | Land surveying firm; Syncro 7180175; managed services $223.92/mo; 7 devices; M365 direct (8 mailboxes, cloud-only, 2x Basic + 5x Premium); **DNS wipe 2026-06-09** — all records deleted (MX, SPF, autodiscover, A), email+website down; GoDaddy domain in client's own account (no ACG control); ticket #32404 Waiting on Customer; remediation tools onboarded 2026-06-10 | 2026-06-10 | ## Projects