8e686ee390
sync: auto-sync from HOWARD-HOME at 2026-06-01 10:26:59
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-01 10:26:59
2026-06-01 10:27:12 -07:00
0dbdd3e76e
Remediation report: client-directed password set for carla@rednourlaw.com
2026-06-01 09:44:49 -07:00
100cf28d62
sync: auto-sync from HOWARD-HOME at 2026-06-01 09:11:26
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-01 09:11:26
2026-06-01 09:11:39 -07:00
79c54c12c9
sync: auto-sync from GURU-5070 at 2026-06-01 08:06:52
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-01 08:06:52
2026-06-01 08:07:15 -07:00
7d2d6ac8c8
sync: auto-sync from GURU-KALI at 2026-05-31 19:31:53
...
Author: Mike Swanson
Machine: GURU-KALI
Timestamp: 2026-05-31 19:31:53
2026-05-31 19:31:56 -07:00
133664b28d
sync: auto-sync from HOWARD-HOME at 2026-05-29 20:26:21
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-29 20:26:21
2026-05-29 20:26:35 -07:00
be3276c15e
sync: auto-sync from GURU-BEAST-ROG at 2026-05-29 16:40:02
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-05-29 16:40:02
2026-05-29 16:40:12 -07:00
01fa9e13b7
sync: auto-sync from GURU-BEAST-ROG at 2026-05-29 16:34:25
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-05-29 16:34:25
2026-05-29 16:34:31 -07:00
4462653beb
sync: auto-sync from HOWARD-HOME at 2026-05-29 16:33:11
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-29 16:33:11
2026-05-29 16:33:21 -07:00
71b3e274ca
feat(cascades): add MCReception ET-5800 print share on CS-SERVER
...
Add the Memory Care Reception Epson ET-5800 (EPSON833571, 10.0.20.78,
dc:cd:2f:83:35:71) as a named print share on CS-SERVER. The printer was
previously pending a UniFi switch replacement; it is now online on VLAN 20.
- Created TCP port TCP_10.0.20.78 and shared as MCReception via GuruRMM
remote PS (driver already present from FrontDesk ET-5800 setup)
- Updated printers.md entry #12 with IP, MAC, share path, and Online status
- Added MCReception to active-directory.md printer table with OU=Care-Memorycare
ILT scope; GPO count bumped to 14
- Added MCReception entry to phase2-print-server.ps1 for reference
Access: OU=Care-Memorycare via Printer Deployment GPO (unlinked until Phase 3).
Alma Montt (cloud-only M365) connects manually to \CS-SERVER\MCReception.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-29 16:32:08 -07:00
40de9733fd
sync: auto-sync from HOWARD-HOME at 2026-05-29 16:07:21
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-29 16:07:21
2026-05-29 16:07:33 -07:00
4c38e9a42b
data(rednour): onboarding baseline for REDNOURCARRIEVI (3rd machine, RED)
...
Completes Rednour first-baseline set. Note: ScreenConnect/Splashtop/Syncro/Datto
RMM+EDR flagged critical are ACG's own stack (false positives - detection tuning
tracked separately). Real issues: Win10 22H2 EOL, RDP without NLA, no BitLocker,
C: 12% free.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-05-29 13:24:10 -07:00
4f8e26a662
feat(rmm): onboarding diagnostic (Phase 1) - probe + triage + baseline
...
/rmm diagnose: dispatches a Windows security/health probe to a newly onboarded
agent, grades RED/AMBER/GREEN, writes an immutable per-client baseline
(clients/<slug>/onboarding-baselines/), diffs vs prior, and alerts CRITICALs to
#dev-alerts. Probe is PS5.1/ASCII/SYSTEM-safe, never-abort, base64 chunked upload
around the agent command-size cap. Code-reviewed (no blockers); folded in
immutability guard, severity-independent finding ids, Defender-unknown sentinel,
expanded competitor/backup detection.
First baselines captured: Rednour FRONTDESKRECEPT + LEGALASST (both RED - prior
MSP ScreenConnect/Splashtop/Syncro still live; LEGALASST OS EOL).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-05-29 13:09:11 -07:00
9248d1a15d
sync: auto-sync from HOWARD-HOME at 2026-05-29 12:57:04
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-29 12:57:04
2026-05-29 12:57:12 -07:00
a3614fcd73
sync: auto-sync from HOWARD-HOME at 2026-05-29 12:39:04
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-29 12:39:04
2026-05-29 12:39:12 -07:00
0349033189
sync: auto-sync from GURU-5070 at 2026-05-28 12:26:25
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-05-28 12:26:25
2026-05-28 12:26:29 -07:00
99a533e6a2
sync: auto-sync from GURU-BEAST-ROG at 2026-05-28 11:22:44
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-05-28 11:22:44
2026-05-28 11:22:48 -07:00
f76f25100e
sync: auto-sync from GURU-BEAST-ROG at 2026-05-28 10:46:43
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-05-28 10:46:43
2026-05-28 10:46:50 -07:00
f75d375a2a
sync: auto-sync from HOWARD-HOME at 2026-05-27 21:29:58
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-27 21:29:58
2026-05-27 21:30:06 -07:00
3dbbbfaa6b
sync: auto-sync from GURU-5070 at 2026-05-27 16:54:37
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-05-27 16:54:37
2026-05-27 16:54:45 -07:00
ba90915da5
docs(session)+rules: 2026-05-27 — Quantum M365 onboarding, IX autodiscover fix, Syncro emergency/labor/attribution rules
...
Session logs: root (Michael #32329 hosting offer + IX simplehost.email autodiscover DNS fix + Cascades #32332 emergency correction) + Quantum client log (M365 tenant 2fd0092b onboarding, break-glass GA, CA report-only).
Syncro rule overhaul:
- Emergency billing: prepaid -> 26184 @ hours x1.5 (was 26118); non-prepaid -> 26184 with channel rate (onsite $262.50 / remote+inshop $225)
- Never make up labor items (existing product + real name; QuickBooks sync)
- Corrections preserve original tech's user_id (commission); adding notes/labor never changes ticket owner
/remediation-tool: Conditional Access may be managed programmatically (report-only first + exclude break-glass + confirm before enforce); fabb3421 deprecated for customer tenants; Quantum tenant onboarded (gotchas table).
Memory: 4 new (no-madeup-labor, corrections-preserve-tech, ca-programmatic, quantum-godaddy-tenant) + updates.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 14:57:55 -07:00
1be8f68154
docs(session): 2026-05-27 (cont) — Quantum #32323 migration, /mailbox skill, Tohono #32328 status
...
- Quantum (new client log): pulled Sheila's email via Graph, posted Intermedia->M365 migration update (emailed), set #32323 In Progress
- Root: /mailbox skill (ACG M365 read + gated send-as) built, verified, distributed (d0be862 ); autotask.md gitignored (46eb9aa )
- Tohono: #32328 -> Waiting on Customer
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 11:06:11 -07:00
19594b15dc
docs(session): 2026-05-27 — RMM Phase 2 deploy, Autotask integration, Tohono DoIT #32328
...
- Root log: GuruRMM Phase 2 authz/IDOR deployed (v0.3.31); Autotask creds verified + vaulted; /autotask scaffolded (kept local)
- Client log (new): Tohono O'odham DoIT — Starlink static IP / site-to-site research, ticket #32328
- Memory: Syncro is default PSA, Autotask opt-in (feedback_psa_default_syncro.md)
Note: .claude/commands/autotask.md intentionally left local/uncommitted per Mike.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-27 10:40:06 -07:00
9c1b67931a
sync: auto-sync from HOWARD-HOME at 2026-05-27 00:31:32
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-27 00:31:32
2026-05-27 00:31:45 -07:00
9a9d239865
sync: auto-sync from GURU-BEAST-ROG at 2026-05-26 21:24:46
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-05-26 21:24:46
2026-05-26 21:24:49 -07:00
b9527cc025
docs(lonestar): Apple MDM setup reference from Syncro data
...
Reference doc for enrolling Lone Star's iPhone (#32251 ) + iPads into the
existing ManageEngine (Zoho) MDM. Pulled Syncro customer/ticket data,
flagged APNs cert prerequisite and the 2026-03-24 self-enrollment caveat.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com >
2026-05-26 17:15:27 -07:00
794c54f08f
sync: auto-sync from GURU-5070 at 2026-05-26 15:58:46
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-05-26 15:58:46
2026-05-26 15:58:50 -07:00
7cefbc66df
sync: auto-sync from Mikes-MacBook-Air.local at 2026-05-22 18:28:37
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-05-22 18:28:37
2026-05-22 18:28:40 -07:00
7622396e8d
sync: auto-sync from DESKTOP-0O8A1RL at 2026-05-22 17:55:34
...
Author: Mike Swanson
Machine: DESKTOP-0O8A1RL
Timestamp: 2026-05-22 17:55:34
2026-05-22 17:55:37 -07:00
a44a0bcee0
sync: auto-sync from HOWARD-HOME at 2026-05-22 15:40:30
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-22 15:40:30
2026-05-22 15:40:34 -07:00
e0688c6654
sync: auto-sync from DESKTOP-0O8A1RL at 2026-05-22 11:07:55
...
Author: Mike Swanson
Machine: DESKTOP-0O8A1RL
Timestamp: 2026-05-22 11:07:55
2026-05-22 11:07:59 -07:00
280428b68b
sync: auto-sync from HOWARD-HOME at 2026-05-22 09:03:36
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-22 09:03:36
2026-05-22 09:03:39 -07:00
882029f8de
Session log: CryoWeave website redesign - complete static site build and deployment
2026-05-22 07:57:48 -07:00
08bff0c22b
Session log: Final sync and directives refresh
...
- Pulled 3 commits from DESKTOP-0O8A1RL (Windows machine)
- Synced 10 global commands to ~/.claude/commands/
- Completed directives self-assessment (no violations)
- Documented cross-machine work context
- Total session log: 739 lines with complete context
Session complete. All machines synchronized.
2026-05-22 06:32:40 -07:00
f0a438e1ae
Session log: Update with vault credentials sync
...
- Updated WordPress version to 7.0 in encrypted vault
- Documented vault access commands and structure
- Added vault commit details (b7a7804)
- Total session log now 655 lines with complete context
2026-05-21 15:46:22 -07:00
b66b1aa081
Session log: CryoWeave website redesign and WordPress updates
...
- Met with Greg to clarify capabilities and market positioning
- Updated WordPress 6.1.10 → 7.0, installed RankMath SEO
- Created professional homepage for university research audience
- Published to dev site: http://dev.cryoweave.com/homepage-professional.html
- Vaulted WordPress credentials in SOPS
- Comprehensive 549-line session log with all credentials and context
2026-05-21 15:42:49 -07:00
3c0ad785e8
sync: auto-sync from HOWARD-HOME at 2026-05-21 14:41:10
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-21 14:41:10
2026-05-21 14:41:13 -07:00
00488a9da7
sync: auto-sync from HOWARD-HOME at 2026-05-21 12:48:20
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-21 12:48:20
2026-05-21 12:48:22 -07:00
0f3b8869fc
sync: auto-sync from HOWARD-HOME at 2026-05-20 22:41:35
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-20 22:41:35
2026-05-20 22:41:38 -07:00
04acf08061
sync: auto-sync from HOWARD-HOME at 2026-05-20 17:08:25
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-20 17:08:25
2026-05-20 17:08:29 -07:00
c255b6c130
sync: auto-sync from DESKTOP-0O8A1RL at 2026-05-20 15:22:14
...
Author: Mike Swanson
Machine: DESKTOP-0O8A1RL
Timestamp: 2026-05-20 15:22:14
2026-05-20 15:22:18 -07:00
f78ccf97da
sync: auto-sync from HOWARD-HOME at 2026-05-20 14:53:36
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-05-20 14:53:36
2026-05-20 14:53:38 -07:00
7b541a6aee
client/cascades: britney.thompson M365 offboarding complete — sign-in blocked, license removed, litigation hold
...
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-20 14:42:05 -07:00
ad7537f7b8
client/cascades: Phase 2.6 COMPLETE — 13 printers, 4 GPOs, 5 accounts disabled
...
Detailed context:
- Task: Cascades of Tucson Phase 2.6 — printer migration, GPO deployment, account cleanup
- Changes:
- phase2-print-server.ps1: all 13 printers complete, Epson driver/share notes added
- active-directory.md: 5 stale accounts disabled, 4 GPOs created, pending issues cleared, printer share table updated
- Session log: 2026-05-20 Howard session covering all Phase 2.6 work
- Status: Phase 2.6 complete
Files modified:
- clients/cascades-tucson/docs/migration/scripts/phase2-print-server.ps1
- clients/cascades-tucson/docs/servers/active-directory.md
- clients/cascades-tucson/session-logs/2026-05-20-howard-phase2.6-printers-gpos-account-cleanup.md
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-20 14:04:08 -07:00
4cd047463a
client/cascades: phase2-print-server.ps1 — 8 printers installed on CS-SERVER
...
Rewrote with verified IPs and confirmed drivers. All 8 printers created and
shared via GuruRMM 2026-05-20. Deferred: FrontDesk Epson (needs Epson
Universal driver), Health-206 Konica Minolta (needs KM PCL6 Universal driver).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-20 14:04:08 -07:00
b92f315207
client/cascades: n.castro cleanup, share docs, hook path fix
...
- active-directory.md: disable n.castro (AD + M365), fix stale Alma.Montt
pending entry (she is intentionally cloud-only), restructure SMB shares
section into new Phase 2.5 / legacy / system buckets (verified live via
GuruRMM Get-SmbShare 2026-05-20)
- settings.json: remove hardcoded D:/claudetools UserPromptSubmit hook
(machine-specific path belongs in settings.local.json only; Howard's
machine is C:/claudetools)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-20 14:04:08 -07:00
d4c8879533
sync: auto-sync from DESKTOP-0O8A1RL at 2026-05-20 10:58:31
...
Author: Mike Swanson
Machine: DESKTOP-0O8A1RL
Timestamp: 2026-05-20 10:58:31
2026-05-20 10:58:35 -07:00
c6daba593f
Session log: EOP access fix + Alma Montt mailbox investigation (Cascades Tucson)
...
- Fixed Exchange.ManageAsApp missing from Security Investigator app registration
- Granted role directly in Cascades tenant via Graph API
- Investigated Alma Montt mailbox: no delivery blocks found, specific sender TBD
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-20 10:39:15 -07:00
8a2638ddee
client/cascades: session log + AD doc update 2026-05-20
...
Phase 2.5 complete. Folder redirection GPO decision documented — deferred
to Phase 3 (blocked on domain joins). Pending items carried forward.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-19 22:32:20 -07:00
406e0ec440
client/cascades: Phase 2.5 AD groups and shares — COMPLETE
...
Created SG-Mgmt-RW, SG-Sales-RO, SG-Activities-RW in OU=Groups.
Created SMB shares Management, Sales, Activities, Server on D:\Shares
with ABE enabled and correct NTFS ACLs per group.
Scripts run on CS-SERVER via GuruRMM 2026-05-20. AD doc updated to live state.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-19 22:32:20 -07:00