--- type: client name: birth-biologic display_name: BirthBiologic last_compiled: 2026-05-24 compiled_by: DESKTOP-0O8A1RL/claude-main sources: - clients/birth-biologic/session-logs/2026-04-21-session.md backlinks: - projects/gururmm --- # BirthBiologic ## Profile - **Company type:** Corporate (exact industry not documented — biological/healthcare services implied by name and SharePoint site structure: Donor Services, Quality Department, Birth Biologic Activity Reports) - **Contract type:** [unverified — MSP-managed implied; no explicit contract type documented] - **Key contacts:** - Annise — primary client contact for SharePoint migration; no last name or email documented - sysadmin@birthbiologic.com — M365 shared admin account; M365 Business Premium license assigned 2026-04-21 - **Billing rate:** [unverified] - **Syncro ticket:** #109277420 (Datto Workplace to SharePoint Migration; assigned to Mike Swanson, user_id 1735; contact: Annise; due 2026-04-22) - **Syncro customer ID:** [unverified — not documented in available session logs] ## Infrastructure ### Servers & Services | Host | IP | Role | OS | Notes | |---|---|---|---|---| | BB-SERVER | [unverified] | On-premise Windows server | Windows Server 2016 | GuruRMM agent installed 2026-04-21; used as command channel for Datto→SharePoint migration script execution | ### Email & Identity - **M365 tenant:** birthbiologic.com (tenant ID: [unverified — "not yet looked up" as of 2026-04-21 session]) - **License:** M365 Business Premium (SKU `cbdc14ab-d96c-4132-b7f4-1f3a3a819bb4`) assigned to sysadmin@birthbiologic.com; includes EMS (standalone EMS removed after upgrade) - **MFA status:** [unverified] - **ACG remediation tool consent status (as of 2026-04-21):** - Security Investigator: consented - Tenant Admin (`709e6eed-0711-4875-9c44-2d3518c47063`): consented - Exchange Operator: NOT consented - User Manager: NOT consented - Defender Add-on: NOT consented - **sysadmin SharePoint role:** sysadmin@birthbiologic.com confirmed as SharePoint admin (required for SPMT destination access) - **Note:** sysadmin@birthbiologic.com did not have a SharePoint/M365 license prior to 2026-04-21. For SharePoint app-only access, use Tenant Admin app with `Sites.ReadWrite.All` (no user license required for app-only). ### File Storage - **Pre-migration:** Datto Workplace (on-premise network file server, accessed from BB-SERVER) - **Post-migration target:** Microsoft SharePoint (M365) - **Migration tool:** Custom PowerShell script (`clients/birth-biologic/scripts/migrate-datto-to-sharepoint.ps1`) + SPMT for bulk folders ### SharePoint Site Map | Datto Folder | SharePoint Site | Notes | |---|---|---| | Admin | birthbiologic.sharepoint.com/sites/Admin | Migrated via SPMT | | Birth Biologic Activity Reports | birthbiologic.sharepoint.com/sites/Admin | Same site as Admin; SPMT preserves source folder name as subfolder | | Donor Services | birthbiologic.sharepoint.com/sites/DonorServices | Migrated via SPMT | | Quality Department | birthbiologic.sharepoint.com/sites/QualityDepartment | Migrated via SPMT | | Supply Management | birthbiologic.sharepoint.com/sites/SupplyManagement | 160/160 files migrated via custom PS script (2026-04-21) | | ITSvcs | EXCLUDED | ACG-owned folder; not client data | Site IDs are hardcoded in `$SITE_MAP` hashtable in the migration script. ### Network - **ISP / WAN:** [unverified] - **Firewall:** [unverified] - **VPN:** [unverified] ## GuruRMM - **Client name:** BirthBiologic - **Client ID:** `da526b38-e832-4159-ab13-a3d94e9897a2` - **Site name:** Main Office - **Site code:** `BRIGHT-PEAK-5980` - **Site ID:** `3b20ef97-c764-4ef8-9154-79c3d5b486f8` - **Agent enrollment key:** `clients/birthbiologic/gururmm-site-main.sops.yaml` (vault) - **Install landing page:** `https://rmm.azcomputerguru.com/install/BRIGHT-PEAK-5980` - **MSI download:** `https://rmm.azcomputerguru.com/sites/3b20ef97-c764-4ef8-9154-79c3d5b486f8/installer` ### Enrolled Agents | Agent | Host | OS | Agent ID | Notes | |---|---|---|---|---| | BB-SERVER | BB-SERVER | Windows Server 2016 | `6c02baa7-0f1c-4990-b466-c9ab9eaefd3b` | Installed 2026-04-21; used as command channel throughout Datto→SP migration; runs Datto Workplace **Server** | | KSTEENBB2025 | KSTEENBB2025 | Windows 11 | `ee3c6aea-e9cc-4d2f-9e79-a38dd0eb129e` | Kristin Steen's workstation | | EVO-X1 | EVO-X1 | Windows 11 | `9595f002-5cfe-4db6-b7aa-1df4a20e9f9b` | Vicki Fountain's workstation; used as SmartBadge fleet reference | | BB-Office2 | BB-Office2 | Windows 11 | `48763401-4859-49f9-b64a-7a50d0148b23` | Shared/office workstation | ## Access - **GuruRMM:** Dashboard → BirthBiologic → Main Office - **M365 admin:** sysadmin@birthbiologic.com - **Vault paths:** - `clients/birthbiologic/gururmm-site-main.sops.yaml` — GuruRMM site enrollment key - `msp-tools/computerguru-tenant-admin.sops.yaml` → `credentials.credential` — Tenant Admin app secret - **Tenant Admin app:** client_id `709e6eed-0711-4875-9c44-2d3518c47063`; consent redirect URI must be `https://azcomputerguru.com` (NOT `https://rmm.azcomputerguru.com`) - **Migration script:** `clients/birth-biologic/scripts/migrate-datto-to-sharepoint.ps1` ## Patterns & Known Issues - **Datto Workplace fleet standard = "Datto Workplace" v10.53.4 (installs to `C:\Program Files\Datto\Workplace2\`).** EVO-X1 and BB-Office2 run this version only. **Never** run the older "Datto Workplace **Desktop**" v8.50.13 (folder `…\Workplace Desktop\`) alongside it — having both installed breaks the Excel SmartBadge add-in (see below). Note the confusing naming: despite "Desktop" sounding newer, v8 Desktop is the *older* product; plain "Datto Workplace" v10 is current. - **SmartBadge Excel add-in failure from dual Datto Workplace installs:** When both Workplace2 (v10) and Workplace Desktop (v8) are present, the `_CC` COM class `{3C639243-95A2-400D-B4B4-4384DA7F61D3}` gets a 64-bit InprocServer32 pointing at the wrong DLL (or only a 32-bit WOW64 entry), so 64-bit Excel can't load the shim and silently drops the SmartBadge ribbon tab. Excel then auto-disables the add-in (per-user `LoadBehavior=2`). **Fix = align to fleet:** remove Workplace Desktop v8 (Revo for a full leftover sweep), install Workplace v10.53.4, ensure only the `_CC` add-in (HKLM+WOW64, `LoadBehavior=3`) with the `_CC` CLSID → `…\Workplace2\SmartBadge\DattoSmartBadgeShim_x64/x86.dll`, and reset the user's `LoadBehavior` to 3 + clear Excel Resiliency. Reference machine: EVO-X1. Scripts: `.claude/scripts/ksteen-smartbadge-verify.ps1`, `.claude/scripts/ksteen-smartbadge-fix.ps1`. - **Windows Server 2016 TLS:** BB-SERVER defaults to TLS 1.0. PowerShell scripts must include `[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12` at the top or Graph API calls will fail. - **GuruRMM command timeout on long-running processes:** The RMM command channel times out on operations running longer than ~300 seconds. An 8 MB PDF upload at ~77 KB/s exceeded this limit during the migration. Workaround: base64-encode file on server, capture stdout, decode and upload locally. - **SharePoint 409 Conflict on retry:** If a chunked upload session is interrupted, a partial item remains in SharePoint. Subsequent upload sessions against the same path return 409 Conflict. Fix: DELETE the item before creating a new upload session. - **SPMT requires sysadmin to be SharePoint admin:** SPMT destination access requires the running account to have SharePoint admin rights. Confirm before scheduling future SPMT runs. - **Syncro comment rendering:** Use `
` for line breaks in Syncro comments. `