## User - **User:** Howard Enos (howard) - **Machine:** Howard-Home - **Role:** tech ## Session Summary Resolved a front-desk scanner failure at Wolkin Law: the Sharp MX-B557F could not scan to the `\\front\scans` SMB share and reported "invalid share name." Diagnosed the root cause as fragile workgroup name resolution — the office is a workgroup with no DNS/WINS authority for the hostname "front," so the name only resolves via broadcast (NetBIOS/LLMNR), which Bob's desktop happened to do but the scanner could not. The laptop additionally had a leftover hosts override (`10.147.19.199 FRONT`) from the ZeroTier remote-access setup that pinned the name to the ZT IP in-office. Pinned FRONT to a static IP using its exact current values (`192.168.1.153/24`, gw `192.168.1.1`, dns `192.168.1.1`) via RMM so the scanner can target the IP reliably. The netsh change blipped the agent (status `interrupted`, "Agent restarted during execution") but it reconnected on the same IP; verified PrefixOrigin=Manual, DHCP=Disabled, gateway reachable. Identified the gateway as a Verizon Fios Router — no admin credentials in vault or 1Password, no remote recovery path (Fios uses a per-unit sticker password); recommended a DHCP reservation as the proper long-term fix once router access is obtained. Verified the FRONT side was airtight before reconfiguring the scanner: `Scans` share exists (`C:\Scans`, Everyone+Administrators Full), `FRONT\Localadmin` enabled with non-expiring password and FullControl on `C:\Scans`. The user provided the scanner web-admin credential and later confirmed `FRONT\Localadmin` / `r3tr0gradE99#` as the SMB auth — both vaulted. The user exported the printer settings (`exported.zip`, a Lexmark bundle — the MX-B557F is a rebadged Lexmark engine) and asked me to fix the scan destinations for re-import. Edited `esf_settings.xml`: removed the second broken eSF "Scan to Network" profile (`\\FRONT\Scans2` / Owner — Scans2 share does not exist), corrected the surviving profile to `192.168.1.153\Scans` (no leading `\\` per the device's SMB connector, per user), set username `localadmin` and added the password. Reduced `shortcuts.ucf` to one native one-touch shortcut (`DISPLAY=1`, `LABEL=Scan to Front`, `RUNIMMEDIATELY=1`) for a home-screen one-click scan. Repackaged as `exported-fixed.zip`. The user reported a post-import error on `deviceQuota` — confirmed benign (that app has `started=false`, so the device skips its settings; must NOT be started or it would enforce print quotas). Finally created Syncro ticket #32465 (Emergency - scanner scan-to-folder repair) for Robert Wolkin, posted a public work-summary note, and invoiced 1.0 hr emergency remote at $225.00 (invoice #67885). Confirmed no prepaid block before billing. ## Key Decisions - Set FRONT static with **identical** current values (not a new address) to eliminate blackout risk during the netsh change — the interface keeps the same IP/gw/dns, only the lease source changes. - Pointed the scanner at the **IP** rather than fixing name resolution, because an IP needs no name resolution at all — the robust fix for an appliance on a nameless workgroup. - Corrected eSF `de_network_address` to `192.168.1.153\Scans` **without** the leading `\\` per the user's instruction (the device's SMB connector prepends it). The native `shortcuts.ucf` keeps `FOLDERPATH=\\192.168.1.153` because that is the device's own export format for that different field. - Removed the second eSF profile entirely (pointed at the nonexistent `Scans2` share as `Owner`) rather than repairing it — user wanted one profile. - Did NOT hand-edit `homescreen.json` (FIXED layout) to add the home button — too risky to malform; used the UCF `DISPLAY=1`/`RUNIMMEDIATELY=1` shortcut instead and documented the panel-side fallback. - Did NOT enable the `deviceQuota` app to clear its import warning — it is configured to enforce print/copy/scan quotas, so starting it would cause a real problem. Leaving it skipped is correct. - Billed emergency remote at $225.00 (product 26184, qty 1.0) after confirming `prepay_hours: null` via the full customer GET (not the search result). ## Problems Encountered - **netsh static IP blipped the RMM agent** — command returned `interrupted` ("Agent restarted during execution"). Resolved by waiting for reconnect (same IP) and re-reading config to confirm the static settings persisted. - **PowerShell 5.1 lacked `-SkipCertificateCheck`** on the gateway/scanner HTTP fingerprint. Resolved by adding a `System.Net.ServicePointManager.CertificatePolicy` trust-all type. - **First eSF instance-removal script matched 4 `` blocks**, not 2 — other eSF apps also use ``. Resolved by scoping the regex to the `ssa_network` `` block before removing its 2nd instance; validated well-formed XML afterward. - **`zip` not available in Git Bash.** Repackaged the bundle with .NET `System.IO.Compression.ZipFile.CreateFromDirectory` via PowerShell (files at archive root). - **Post-import `deviceQuota` error** worried the user — confirmed pre-existing and benign (app `started=false`), unrelated to the scan edits. ## Configuration Changes - **FRONT (`192.168.1.153`)** — Ethernet (Intel I219-V) converted from DHCP to **static**: `192.168.1.153/24`, gw `192.168.1.1`, dns `192.168.1.1`. DHCP disabled. - **`C:\Users\Howard\Documents\ComputerGuru Connect v2\Files\exported-fixed.zip`** (new) — fixed Lexmark settings bundle. Original `exported.zip` left intact. - `esf_settings.xml`: removed 2nd `ssa_network` instance (guid A8, "front desk scans" -> `\\FRONT\Scans2`/Owner); surviving instance (guid A25, "scans") -> `de_network_address=192.168.1.153\Scans`, `de_network_username=localadmin`, added `de_network_password`. - `shortcuts.ucf`: reduced 2 shortcuts -> 1; `DISPLAY=1`, `LABEL=Scan to Front`, `FILENAME=Scan`, `RUNIMMEDIATELY=1`, `FOLDERPATH=\\192.168.1.153`, `NAME=Scans`, `USERNAME=localadmin`. - **Vault** — created `clients/wolkin/sharp-mfp.sops.yaml`, `clients/wolkin/front-localadmin.sops.yaml` (both committed + pushed). - **Wiki** — `wiki/clients/wolkin.md`: recorded FRONT static IP + MAC, scanner-must-use-IP detail, vault pointers, export-fix note. ## Credentials & Secrets - **Sharp MX-B557F web admin (EWS)** `http://192.168.1.158` — `admin` / `r3tr0gradE99#`. Vault: `clients/wolkin/sharp-mfp.sops.yaml`. - **FRONT\Localadmin** (Windows local admin on FRONT; scanner SMB auth to `\\192.168.1.153\Scans`) — `localadmin` / `r3tr0gradE99#` (same string as the MFP admin). Vault: `clients/wolkin/front-localadmin.sops.yaml`. ## Infrastructure & Servers - **FRONT** — office print/file server. LAN `192.168.1.153` (now static), ZeroTier `10.147.19.199`. NIC Intel I219-V, MAC `A0:AD:9F:95:C4:01`. Win11 Home, workgroup. RMM agent id `877d311a-4b24-462c-97b1-d2a0f7730a71`. - **Sharp MX-B557F** MFP — `192.168.1.158` (rebadged Lexmark; web server `Lexmark_Web_Server`, FW `MXTGW.081.215`). Print raw TCP 9100, print share `\\front\Sharp`. Scan-to-folder -> `\\192.168.1.153\Scans` as `FRONT\Localadmin`. - **Gateway** — Verizon Fios Router `192.168.1.1`, MAC `74:90:BC:AD:C6:C5`, web admin 80/443. No credentials held. - **`C:\Scans`** on FRONT — scan target. Share `Scans` ACL Everyone+Administrators Full; NTFS grants Localadmin/Owner/julie/Administrators/SYSTEM FullControl. - Office LAN `192.168.1.0/24`; ZeroTier mesh `17d709436c834c9b` (10.147.19.0/24). ## Commands & Outputs - Static IP: `netsh interface ipv4 set address name="Ethernet" static 192.168.1.153 255.255.255.0 192.168.1.1` + `set dnsservers ... static 192.168.1.1 primary`. Verified `PrefixOrigin=Manual`, `Dhcp=Disabled`, gateway reachable. - Gateway/scanner fingerprint via FRONT `Invoke-WebRequest` with trust-all CertificatePolicy (PS 5.1 has no `-SkipCertificateCheck`). - eSF instance removal scoped to `` block; XML validated with `xml.dom.minidom`. - Repackage: `[System.IO.Compression.ZipFile]::CreateFromDirectory($src,$out,Optimal,$false)`. ## Pending / Incomplete Tasks - **User to import `exported-fixed.zip`** via the EWS and run a test scan; confirm a PDF lands in `C:\Scans`. If auth fails, re-enter `localadmin`/`r3tr0gradE99#` on the panel once (export strips passwords). - **Home-screen button:** if the "Scan to Front" shortcut does not auto-appear after import, add it via the panel (Home Screen Customization). `homescreen.json` was intentionally not edited. - **DHCP reservation** for FRONT (`A0:AD:9F:95:C4:01` -> `.153`) on the Verizon Fios router once admin access is obtained; then optionally revert FRONT to DHCP so the router DNS re-registers "front" (restores `\\front` name resolution fleet-wide) and drop the stale `10.147.19.199 FRONT` hosts line on RSW-Laptop. - **Offered:** live-watch `C:\Scans` via RMM during a test scan (not yet run). - Pre-existing open follow-up: rotate `front\julie` (password transited RMM log during prior diagnosis). ## Reference Information - Syncro ticket **#32465** (id `113088983`) — https://computerguru.syncromsp.com/tickets/113088983 — status Invoiced. - Syncro invoice **#67885** (id `1650805533`) — $225.00, 1.0 hr emergency remote (product 26184). - Customer: Wolkin, Robert (id `796910`), `prepay_hours: null` (no block). - RMM: base `http://172.16.3.30:3001`; FRONT agent `877d311a-4b24-462c-97b1-d2a0f7730a71`. - Vault: `clients/wolkin/sharp-mfp.sops.yaml`, `clients/wolkin/front-localadmin.sops.yaml`. - Files: `C:\Users\Howard\Documents\ComputerGuru Connect v2\Files\exported.zip` (original), `exported-fixed.zip` (fixed).