# Wolkin Law — Client Files share corrected + Sharp print share over ZeroTier ## User - **User:** Mike Swanson (mike) - **Machine:** GURU-5070 - **Role:** admin ## Session Summary Continued Wolkin Law remote-access work from GURU-5070 (the Mac did the initial ZeroTier/SMB/M365 setup earlier 2026-06-07). Two fixes: the Client Files share was pointing at the wrong folder, and the office printer share to Julie's remote laptop was not working. **Client Files share corrected.** The `\\FRONT\ClientFiles` SMB share was live- pointed at `C:\Users\Owner\OneDrive\Documents\PRodriquezClients` (a single client's 18-file folder), not the firm repository. Searched FRONT and Bob's desktop (DESKTOP-V1JT1SE) via RMM for the real all-client-data folder. Found it: `C:\Users\Owner\OneDrive\Documents` — 181 client/matter subfolders (+ a "Closed Files" folder with 97 more) — identical on both machines (the `Owner` OneDrive account syncs to both, so it is the shared library both see). Repointed `\\FRONT\ClientFiles` to `OneDrive\Documents`, granted `front\julie` NTFS FullControl (inherited). Share name kept "ClientFiles" so Julie's existing shortcut resolves unchanged. Mike confirmed full access to the entire repository is the intent. **Sharp print share over ZeroTier.** Confirmed the device is a Sharp MX-B557F (driver "Sharp Universal v2 XL") at office LAN IP 192.168.1.158 — every prior reference to a RICOH (and to 172.17.110.110) was a phantom from unrelated temp files. FRONT and Bob's desktop both print to this Sharp. Ran a 3-way consensus (Claude + Grok + Agy/Gemini) on the approach: print-SERVER share `\\FRONT\Sharp` over ZeroTier (subnet routing rejected); move FRONT's Sharp from its flaky WSD port to a Standard TCP/IP port; connect the laptop via the ZeroTier IP (hosts already maps FRONT -> 10.147.19.199); disable Bidirectional Support if the driver auto- config balks (Agy's catch); verify the ZeroTier interface is Private. **Root cause of the print failure:** the ZeroTier interface was classified **Public** on BOTH FRONT and RSW-Laptop. Windows "File and Printer Sharing" inbound rules (including the Print Spooler RPC) are enabled for the **Private** profile only, so print/RPC over ZeroTier was blocked even though file SMB worked. Set both ends to Private; enabled File and Printer Sharing; moved FRONT's Sharp to TCP/IP 192.168.1.158:9100 (ping + TCP 9100 confirmed reachable). The automated laptop-side `Add-Printer` from Julie's session failed with SMB error 67 / RPC 1702 (IPC$ over the ZT IP would not bind despite 445 being open); Mike completed the laptop-side `\\FRONT\Sharp` connection manually. Cleared 3 stuck jobs from FRONT's Sharp queue. ## Key Decisions - Repointed the share to the FULL `OneDrive\Documents` repository (181 matters + closed files) rather than a curated subset — Mike confirmed full assistant access is intended. - Print-server share (`\\FRONT\Sharp`) over ZeroTier, NOT a managed subnet route — unanimous 3-AI consensus (simpler, more secure, uses proven SMB transport). - WSD -> Standard TCP/IP 9100 on FRONT for the shared printer (WSD is unreliable for a server share to remote clients). - Connect via the ZeroTier IP / hosts-mapped name, not a bare `\\FRONT` that could resolve to the dead LAN IP. ## Problems Encountered - **ZeroTier interface = Public** on both machines blocked the print-spooler RPC (File and Printer Sharing rules are Private-only). Fixed: set Private both ends. This was the actual reason printing failed while file sharing worked. - **Live share path was wrong** (`...\Documents\PRodriquezClients`, a single client) — not even the `Shared Data\CLIENT FILES` the Mac's notes recorded. Repointed to the real `OneDrive\Documents` repo. - **Wiki had the wrong office LAN** (172.17.110.0/24). FRONT's Ethernet is actually 192.168.1.153/24; the printer is 192.168.1.158. The 172.17.110.110 "RICOH" port on FRONT is an orphan with no device. - **Automated laptop printer add failed** (SMB error 67 / RPC 1702 from Julie's session even with 445 reachable). Mike finished the laptop connection by hand. - **Client-slug fragmentation:** this one client is recorded under three slugs — `clients/wolkin/`, `clients/wolkin-law/`, `clients/rswolkin/` (+ wiki `wolkin.md`, `wolkin-law.md`, `robert-wolkin.md`). Worth consolidating. ## Configuration Changes GuruRMM-dispatched changes (no repo code changes): - FRONT (`877d311a-4b24-462c-97b1-d2a0f7730a71`): repointed SMB share `ClientFiles` -> `C:\Users\Owner\OneDrive\Documents`; `icacls` grant `front\julie:(OI)(CI)F`; added Standard TCP/IP printer port `IP_192.168.1.158` (192.168.1.158:9100); `Set-Printer -Name Sharp -PortName IP_192.168.1.158`; ZeroTier interface Public -> Private; enabled "File and Printer Sharing" firewall group; cleared 3 stuck print jobs. - RSW-Laptop (`043fd673-35a2-4d3d-8f91-ed73ce70cc1e`): ZeroTier interface Public -> Private. (Printer connection completed manually by Mike.) ## Credentials & Secrets - `front\julie` local account password: `Jaylen0607!` (set manually via ScreenConnect per the prior session; the RMM agent silently fails to set passwords — see `feedback_rmm_password_limitation.md`). Used to auth laptop->FRONT for the share. (Should be migrated to vault `clients/wolkin/`.) ## Infrastructure & Servers - Office LAN: **192.168.1.0/24** (corrected from 172.17.110.x). - FRONT (office PC / print server): Ethernet 192.168.1.153/24, ZeroTier 10.147.19.199. - Sharp MFP: **Sharp MX-B557F**, driver "Sharp Universal v2 XL", IP 192.168.1.158, raw TCP 9100. Shared as `\\FRONT\Sharp`. - RSW-Laptop (Julie): ZeroTier 10.147.19.54; hosts entry `10.147.19.199 FRONT`. - DESKTOP-V1JT1SE (Bob's desktop): also syncs the `Owner\OneDrive\Documents` repo. - ZeroTier network: `17d709436c834c9b`. M365 tenant: rswolkin.com. ## Commands & Outputs - Real client repo: `C:\Users\Owner\OneDrive\Documents` = 181 subfolders (both machines). Old share target `...\Documents\PRodriquezClients` (18 files). - FRONT printer move: `Add-PrinterPort -Name IP_192.168.1.158 -PrinterHostAddress 192.168.1.158 -PortNumber 9100`; `Set-Printer -Name Sharp -PortName ...`. - ZeroTier fix: `Set-NetConnectionProfile -InterfaceAlias 'ZeroTier*' -NetworkCategory Private` (was Public on both ends). - Laptop add failure: `Add-Printer -ConnectionName \\FRONT\Sharp` -> "specified server does not exist..."; `net use \\10.147.19.199\IPC$` -> System error 67; `net view` -> 1702 (binding handle invalid). Connectivity (ping/445) was fine. - Queue clear: removed jobs id 24/26/53 on Sharp -> 0 jobs, spooler running. ## Pending / Incomplete Tasks - Confirm Julie can print a real test page to the Sharp end-to-end (Mike completed the connection; physical confirmation pending). - If the Sharp driver UI hangs/"status unavailable" on the laptop, disable Bidirectional Support (Printer Properties > Ports) per Agy's recommendation. - Migrate `front\julie` password + Wolkin creds to vault `clients/wolkin/`. - **Consolidate the three Wolkin client slugs** (wolkin / wolkin-law / rswolkin) into one canonical slug. - Update `wiki/clients/wolkin.md` Network section (office LAN is 192.168.1.0/24, not 172.17.110.x; printer is Sharp MX-B557F @ 192.168.1.158). ## Reference Information - Syncro ticket #32369 (Remote Work Access Setup). - Agents: FRONT 877d311a-4b24-462c-97b1-d2a0f7730a71; RSW-Laptop 043fd673-35a2-4d3d-8f91-ed73ce70cc1e; DESKTOP-V1JT1SE 30f6af79-ab19-4ed3-9ebc-71b2bffc2d27. - 3-AI consult brief: `.claude/tmp/wolkin-print-brief.txt`.