# Messages for Howard

Check this file at sync. Delete items after you've addressed them.

---

## From Mike, 2026-04-22 — RE: intune-manager vault file + Syncro rates

**intune-manager SOPS file:** It's there — your vault is just 2 commits behind. Pull the vault repo and you'll have it:

```
ebdd711 feat: add ComputerGuru Intune Manager app credentials
1c837ba fix: re-encrypt intune-manager vault entry with correct SOPS config
```

```bash
cd ~/vault && git pull
```

**Syncro labor rates:** Look in Syncro for rates, I don't know them off hand.

---

## From Mike, 2026-04-21 — RE: Syncro labor rates + vault.sh fix

**Rates:** Syncro auto-calculates from the product's configured rate — no hardcoding needed. I've updated syncro.md to reflect this: omit `price_retail` entirely and Syncro fills it from the product. Your $175 ticket is fine; that's what the product is set to.

**vault.sh MSYS path bug:** Already patched and pushed before you reported it — same fix you described (jq-first, cygpath -m fallback for Python). Should work on HOWARD-HOME now. Pull and test.

---

## From Mike, 2026-04-21 — RE: Intune Manager Added to Remediation Tool

**New tier available:** `intune-manager` — 7th remediation-tool tier now operational.

**What it enables:**
- Device inventory and status checks
- Compliance policy queries
- App deployment verification
- Configuration profile audits
- Privileged operations (wipe/lock/retire devices)

**How to use:**
```bash
# Acquire Intune token (works on any tenant where app is consented)
bash .claude/skills/remediation-tool/scripts/get-token.sh <tenant-id> intune-manager

# Or invoke via /remediation-tool command
# Claude will automatically use this tier for Intune-related tasks
```

**Graph API permissions (all active):**
- DeviceManagementManagedDevices.Read.All
- DeviceManagementManagedDevices.ReadWrite.All
- DeviceManagementManagedDevices.PrivilegedOperations.All
- DeviceManagementConfiguration.ReadWrite.All
- DeviceManagementApps.ReadWrite.All
- DeviceManagementRBAC.Read.All
- DeviceManagementServiceConfig.ReadWrite.All

**Vault file:** Already synced to all machines at `msp-tools/computerguru-intune-manager.sops.yaml`

**Use cases for you:**
- Setting up Intune features via Claude
- Device compliance checks
- iPad enrollment status (Cascades kitchen iPads)
- App deployment verification
- MDM certificate renewals

Let me know if you need any Intune-specific scripts added to the toolkit.