Howard Enos
8d975c1b44
Howard's personal MSP client documentation folder imported into shared
ClaudeTools repo via /import command. Scope:
Clients (structured MSP docs under clients/<name>/docs/):
- anaise (NEW) - 13 files
- cascades-tucson - 47 files merged (existing had only reports/)
- dataforth - 18 files merged (alongside incident reports)
- instrumental-music-center - 14 files merged
- khalsa (NEW) - 22 files, multi-site (camden, river)
- kittle (NEW) - 16 files incl. fix-pdf-preview, gpo-intranet-zone
- lens-auto-brokerage (NEW) - 3 files (name matches SOPS vault)
- _client_template - 13-file scaffold for new clients
MSP tooling (projects/msp-tools/):
- msp-audit-scripts/ - server_audit.ps1, workstation_audit.ps1, README
- utilities/ - clean_printer_ports, win11_upgrade,
screenconnect-toolbox-commands
Credential handling:
- Extracted 1 inline password (Anaise DESKTOP-O8GF4SD / david)
to SOPS vault: clients/anaise/desktop-o8gf4sd.sops.yaml
- Redacted overview.md with vault reference pattern
- Scanned all 160 files for keys/tokens/connection strings -
no other credentials found
Skipped:
- Cascades/.claude/settings.local.json (per-machine config)
- Source-root CLAUDE.md (personal, claudetools has its own)
- scripts/server_audit.ps1 and workstation_audit.ps1 at source root
(identical duplicates of msp-audit-scripts versions)
Memory updates:
- reference_client_docs_structure.md (layout, conventions, active list)
- reference_msp_audit_scripts.md (locations, ScreenConnect 80-char rule)
Session log: session-logs/2026-04-16-howard-client-docs-import.md
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
85 lines
2.9 KiB
Markdown
85 lines
2.9 KiB
Markdown
# Server: AD2
|
||
|
||
## General Info
|
||
- Hostname: AD2
|
||
- IP Address: 192.168.0.6
|
||
- OS: Windows Server 2016 Standard
|
||
- Physical / Virtual: VM (VMware Tools + VGAuthService running, on ESXi)
|
||
|
||
## Roles and Services
|
||
- [x] Secondary Domain Controller
|
||
- [x] DNS Server
|
||
- [x] DFS Replication / Namespace
|
||
- [x] File Server (multiple shares)
|
||
- [x] TestDataDB host (Node.js + SQLite on port 3000)
|
||
- [x] NAS sync (rsync every 15 min)
|
||
|
||
## Storage
|
||
- C: drive 1 TB, 405 GB free
|
||
- E: drive (VSS shadow copy target)
|
||
|
||
## Shares
|
||
| Share Name | Path | Mapped As | Notes |
|
||
|-----------|------|-----------|-------|
|
||
| c-drive | C:\Shares\c-drive | Q: | — |
|
||
| e-drive | C:\Shares\e-drive | T: | — |
|
||
| test | C:\Shares\test | — | NAS sync staging, DOS station data |
|
||
| webshare | C:\Shares\webshare | X: | Contains For_Web datasheets |
|
||
|
||
## Key Applications
|
||
### TestDataDB
|
||
- Type: Node.js + SQLite web app
|
||
- URL: http://192.168.0.6:3000
|
||
- Location: C:\Shares\testdatadb\
|
||
- Database: C:\Shares\testdatadb\database\testdata.db (~3 GB)
|
||
- Service: `testdatadb` (Windows service, runs as INTRANET\svc_testdatadb)
|
||
- Stats: 2,281,524 test records, 33,745 work orders, 1,470+ model specs
|
||
|
||
## Scheduled Tasks
|
||
| Task | Status | Schedule | Notes |
|
||
|------|--------|----------|-------|
|
||
| Sync-FromNAS | Ready | Every 15 min | Bidirectional rsync with D2TESTNAS |
|
||
| TestDataDB-Backup | Ready | Scheduled | SQLite DB backup |
|
||
| VSS Shadow Copy | Ready | Daily 2:00 AM | E: drive |
|
||
| ClaudeTools Log Rotation | Ready | — | Log rotation |
|
||
| AgentBinaryUpdate | Ready | — | RMM agent update |
|
||
| AgentRestart | Ready | — | GuruRMM restart |
|
||
| GuruRMM-Rollback | Ready | — | RMM rollback |
|
||
| TestDataDB Server | Disabled | — | Replaced by Windows service |
|
||
| TestDataDB_NodeServer | Disabled | — | Alternate startup (disabled) |
|
||
| BulkSync-Catchup | Disabled | — | One-time bulk sync (done) |
|
||
|
||
## Running Services (Non-Default)
|
||
| Service | Purpose | Run As |
|
||
|---------|---------|--------|
|
||
| testdatadb | TestDataDB web app (Node.js port 3000) | INTRANET\svc_testdatadb |
|
||
| CagService | Datto RMM agent | — |
|
||
| GuruRMMAgent | GuruRMM monitoring | — |
|
||
| ScreenConnect Client | Remote access | — |
|
||
| Online Backup Service | Backup agent | — |
|
||
| VGAuthService | VMware guest auth | — |
|
||
| VMTools | VMware Tools | — |
|
||
| NTDS | AD DS | — |
|
||
| Kdc | Kerberos KDC | — |
|
||
| ADWS | AD Web Services | — |
|
||
| DFSR | DFS Replication | — |
|
||
| Dfs | DFS Namespace | — |
|
||
| ssh-agent | OpenSSH auth agent | — |
|
||
|
||
## Windows Firewall
|
||
| Profile | Status |
|
||
|---------|--------|
|
||
| Domain | **DISABLED** |
|
||
| Private | **DISABLED** |
|
||
| Public | **DISABLED** |
|
||
|
||
## History
|
||
- **Wiped and rebuilt after 2025 crypto/ransomware attack**
|
||
- Many files lost (C:\DFWDS\, scheduled tasks, service configs)
|
||
- TestDataDB pipeline rebuilt 2026-03-27–29
|
||
|
||
## Known Issues
|
||
- **[CRITICAL]** All firewall profiles disabled
|
||
- **[LOW]** DVD ISO still mounted on D: drive
|
||
- **[MEDIUM]** TestDataDB Server scheduled task still exists but disabled
|