Howard Enos
5eee825ecf
Full recompile via Sonnet synthesis: enriched with Syncro billing history (#100079, #67060, #67810), corrected ticket #32397 to Invoiced status, added deferred items. Break-fix/no-RMM client. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
114 lines
9.2 KiB
Markdown
114 lines
9.2 KiB
Markdown
---
|
||
type: client
|
||
name: universal-minerals
|
||
display_name: Universal Minerals International Inc
|
||
last_compiled: 2026-06-10
|
||
compiled_by: HOWARD-HOME/claude-main
|
||
sources:
|
||
- clients/universal-minerals/session-logs/2026-06/2026-06-10-howard-cyndyoffice-freeze-diagnosis.md
|
||
- Syncro customer 34844920
|
||
- Syncro ticket #32397 (id 112445840)
|
||
- .claude/memory/cyndyoffice-physical-hp-lockups.md
|
||
backlinks: []
|
||
---
|
||
|
||
# Universal Minerals International Inc
|
||
|
||
Minerals / commodities business in Tucson, AZ. ACG client on a **per-incident (break-fix) basis — NO prepaid block and NOT an RMM / monitoring client.** Work is billed per ticket at standard rates.
|
||
|
||
---
|
||
|
||
## Profile
|
||
|
||
- **Company type:** Minerals / commodities (domain `umint.com`)
|
||
- **Contract type:** Per-incident / break-fix. Prepay hours: 0.0 (always re-check `GET /customers/34844920` before billing). No monitoring or RMM contract.
|
||
- **Billing rate:** Onsite $175/hr (Syncro product 26118); standard non-prepaid rates.
|
||
- **Syncro customer ID:** `34844920`
|
||
- **Address:** 4620 South Coach Drive, Tucson, AZ 85714
|
||
- **Main phone:** 520-838-0945
|
||
- **Key contacts:**
|
||
- Amber R. — amberr@umint.com (Syncro primary email on file)
|
||
- Accounts Payable — accountspayable@umint.com (Syncro contact)
|
||
- **Cyndy** — primary user of the CyndyOffice workstation; full name / role (verify)
|
||
- **Managed assets (Syncro):** 0
|
||
- **Billing pattern:** Established break-fix client; occasional small jobs. Invoice history: #100079 $75.00 (2025-12-17), #67060 $75.00 (2026-02-25), #67810 $175.00 (2026-06-10). Onsite labor at $175/hr.
|
||
- **Tax rate:** (verify — confirm assignment in Syncro before any hardware / taxable billing)
|
||
|
||
---
|
||
|
||
## Infrastructure
|
||
|
||
> Sparse — only what surfaced during the 2026-06-10 freeze diagnosis. Expand as more of the environment is documented.
|
||
|
||
### Workstations
|
||
|
||
- **CyndyOffice** — Cyndy's primary desktop. Physical HP Pavilion Desktop, NOT a VM despite the RMM site name "Howard-VM" that was briefly in use.
|
||
- **Hardware:** HP Pavilion Desktop **TP01-2xxx** (AMD, 16 logical CPUs, single 16 GB Kingston DIMM, 1 TB WD SN530 NVMe).
|
||
- **Identifiers:** Product # (SKU) `318G6AA#ABA`; Serial / Service Tag `2MO21549RB`; motherboard HP 8906; BIOS **F.38** (updated 2026-06-10 from F.36 via HP Support Assistant; F.38 dated 2025-07-30).
|
||
- **OS:** Windows 11 Home, build 26200.
|
||
- **Line-of-business app:** QuickBooks **Enterprise 22.0** (2022 edition — past Intuit support). QuickBooks Tool Hub installed.
|
||
- **Security:** Windows Defender only (no third-party AV active; orphaned `mbamchameleon` Malwarebytes leftover driver removed 2026-06-10).
|
||
- **RMM:** A GuruRMM agent was installed **temporarily for diagnosis only** on 2026-06-10 and **fully removed the same day** (Windows services + binary + data directories uninstalled via detached scheduled task; server-side record deleted via `DELETE /api/agents/<id>` → HTTP 204). This client does not pay for RMM/monitoring. Any future RMM use must follow the same install-diagnose-remove pattern.
|
||
|
||
### Other Workstations / Servers
|
||
|
||
- (verify — no other machines surfaced during the 2026-06-10 engagement)
|
||
|
||
### Email & Identity
|
||
|
||
- Domain `umint.com`. Platform (M365 / Google Workspace / on-prem Exchange) (verify).
|
||
|
||
---
|
||
|
||
## Access
|
||
|
||
- **Syncro:** customer `34844920`.
|
||
- **Vault root:** none yet — `clients/universal-minerals/` has not been created in the vault. No credentials were captured during the 2026-06-10 engagement. RMM and Syncro auth used existing shared MSP vault paths (`infrastructure/gururmm-server.sops.yaml`, Syncro per-user key for howard).
|
||
|
||
---
|
||
|
||
## Patterns & Known Issues
|
||
|
||
- **CyndyOffice intermittent hard freeze / forced power-off (partially mitigated 2026-06-10; informal monitoring window active).** The machine locks up solid and must be force-powered-off. Event-log signature: ~20 occurrences over approximately six weeks (Apr 26 – Jun 9 2026), each a **Kernel-Power 41 with bugcheck code 0 and no crash dump**, paired with a 6008 dirty-shutdown; **no WHEA hardware errors logged**. With crash dumps confirmed enabled (`CrashDumpEnabled=3, AutoReboot=1`), the absence of any minidump or MEMORY.DMP is real signal — these are **true hardware/firmware freezes, not a Windows BSOD or software crash**. The event log goes silent at each freeze and resumes only at the next boot. Ruled out: SSD healthy (0% wear, 37C), sleep/wake (no auto-sleep on AC configured), AV conflict (Defender only), idle thermal (~30C). Fixes applied 2026-06-10: **BIOS F.36 → F.38, Fast Startup disabled** (`HiberbootEnabled` 1 → 0), **Windows Memory Diagnostic (Standard 2-pass) PASSED** (no errors), **orphaned `mbamchameleon` service removed** (Malwarebytes leftover with missing .sys; deleted via `sc.exe delete` operating directly on the SCM registry key; cleared boot Event 7000). TPM-WMI 1796 (Secure Boot SBAT `0x800700c1`) left alone — identified as benign Microsoft noise. **Prime remaining hardware suspect: PSU** (stock HP Pavilion supply) if freezing recurs. Monitoring is now manual / customer-reported (no RMM). Diagnostic detail: [[cyndyoffice-physical-hp-lockups]].
|
||
|
||
- **QuickBooks messaging crash-loop (separate from the freeze).** `QuickBooksMessaging.exe` (v1.0.9186.39137) crash-loops at approximately 15/min with a .NET `System.ObjectDisposedException` at `System.Windows.Forms.NotifyIcon.UpdateIcon` (faulting module `KERNELBASE.dll`, exception `0xE0434352`). Log noise only; not the freeze cause. Repaired via QuickBooks Tool Hub 2026-06-10 — no new crashes logged after repair + reboot. Confirm fully clear once the company file is opened and in active use. QuickBooks Enterprise 22.0 is past Intuit support; a version upgrade to a current supported year is the longer-term fix.
|
||
|
||
- **Break-fix client — confirm scope and authorization per incident.** No standing monitoring or RMM contract. Any RMM agent deployed for diagnosis must be removed on completion (as was done 2026-06-10). Standard non-prepaid billing; verify prepay balance is 0.0 and confirm scope before starting work.
|
||
|
||
---
|
||
|
||
## Active Work
|
||
|
||
- **Ticket #32397 — "Onsite - Computer intermittently freezing and shutting down" (status: Invoiced).**
|
||
- Diagnosis complete; BIOS F.38, Fast Startup disabled, RAM passed (Windows Memory Diagnostic Standard), boot-error cleanup done. Machine is in an informal **monitoring window** to confirm the freezing has stopped (freezes occurred every 1–3 days; watch for new Kernel-Power 41 events). No RMM in place — monitoring is manual / customer-reported.
|
||
- **Contingency (documented publicly on the ticket, client emailed):** if freezing recurs after the BIOS / Fast Startup fixes, the next step is a full hardware diagnostic (extended MemTest86 USB run + drive / PSU testing) plus a backup and clean Windows reinstall to rule out OS corruption — approximately 1–2 days of machine downtime. PSU is the prime hardware suspect.
|
||
- **Optional deferred items (not billed, not urgent):** pagefile is fixed at 1 GB on C: (recommend switching to system-managed); QuickBooks 22.0 is past Intuit support (recommend upgrade to a current supported year).
|
||
- **Billed:** 1.0h onsite, $175.00, invoice **#67810** (id 1650637398), 2026-06-10. Client emailed the work summary plus the contingency note (public Syncro comment 418397979, `do_not_email: false`). Invoice PDF send is a Syncro GUI step — no verified API endpoint; not confirmed sent via API.
|
||
|
||
---
|
||
|
||
## History Highlights
|
||
|
||
| Date | Event |
|
||
|---|---|
|
||
| 2025-12-17 | Invoice #100079, $75.00 — nature of work (verify) |
|
||
| 2026-02-25 | Invoice #67060, $75.00 — nature of work (verify) |
|
||
| 2026-06-09 | Ticket #32397 opened — CyndyOffice intermittently freezing and shutting down |
|
||
| 2026-06-10 | Howard diagnosed CyndyOffice via temporary GuruRMM agent: confirmed hardware/firmware hard-freeze signature (Kernel-Power 41, bugcheck 0, no dump, no WHEA). Applied BIOS F.38, disabled Fast Startup, ran Windows Memory Diagnostic (passed), removed orphaned `mbamchameleon` service. Repaired QuickBooks messaging crash-loop via QB Tool Hub. Ticket #32397 notes posted publicly (findings, memtest result, QB repair + contingency) |
|
||
| 2026-06-10 | Billed 1.0h onsite ($175, invoice #67810); client emailed work summary + 1–2 day reinstall/HW-test contingency |
|
||
| 2026-06-10 | GuruRMM agent removed from CyndyOffice (uninstalled via detached scheduled task + `sc delete` of services + dirs removed; server-side record deleted) — client is break-fix / no-RMM |
|
||
| 2026-06-10 | Client wiki article seeded |
|
||
|
||
---
|
||
|
||
## Compilation Notes
|
||
|
||
- Full recompile 2026-06-10 (HOWARD-HOME/claude-main). Sources: CyndyOffice freeze-diagnosis session log, Syncro live data (customer 34844920, ticket #32397 id 112445840), memory file `cyndyoffice-physical-hp-lockups.md`. First full article for this client; article seeded same day as the initial engagement.
|
||
- Ticket #32397 status updated from In Progress to **Invoiced** (Syncro moved it automatically on invoice creation per Syncro billing flow).
|
||
- Break-fix / no-RMM client — the GuruRMM agent on CyndyOffice was a temporary diagnostic tool, removed same-day.
|
||
- Flagged (verify): Cyndy's full name / role; email platform for `umint.com`; nature of the two prior invoices (#100079, #67060); Syncro tax-rate assignment; the rest of the on-site environment (server, other workstations, network topology).
|
||
|
||
## Backlinks
|
||
|
||
*(none yet)*
|