3.4 KiB
The Prairie Schooner — Cutover Runbook
REVISED 2026-07-14 evening (Howard's call): decouple the two migrations.
Tomorrow morning = NETWORK SWAP ONLY (SonicWall/USG out, UDM Pro in). Nothing else
changes — Q: keeps pointing at \tps-server, QB keeps running off the OLD server.
If QB works after the cable move, the network is proven. The QB/file-server move to
TPS-SVR happens LATER as its own step with its own test.
Companion file: udm-dhcp-plan.md (LAN/DHCP/reservations detail).
State as of tonight (all verified)
- QuickBooks CLOSED everywhere: MEL-PC killed clean; TINA + JAYMI had kernel-zombie QBW (unkillable, hung SMB handle) -> users logged off, both machines rebooted, QBCFMonitorService stopped on all 3. Zero open handles on the server's Quickbooks share.
- Data ALREADY STAGED on TPS-SVR (held in reserve for the later server move): robocopy delta completed 18:40 with FAILED=0 — Quickbooks 144.2 GB / Deployment 22.4 GB in C:\Share*. Company file: schoonerQB2025.QBW (2.9 GB) + consistent ND/DSN/TLG set.
- Q: -> \tps-server\quickbooks via GPP in Default Domain Policy — NOT touched (stays on the old server for tomorrow's test).
- Client-visible network today: gateway .1, DHCP from SonicWall, DNS handed = .125.
TONIGHT — UDM Pro config only (UniFi app, Pro LAN ISOLATED)
Values in udm-dhcp-plan.md. Summary:
- LAN 192.168.1.1/24 (Pro takes the SonicWall's IP), domain tps.local
- DHCP pool 192.168.1.100–199
- DNS handed to clients: .125, .135 — SAME primary as today. Zero observable change. (Flip to .135-first later, after the network is proven — that control is the point of this swap.)
- 7 fixed-IP reservations: 3 PCs, 3 Yealink phones, Dahua NVR (MACs in the plan file)
- Content filtering / DNS Shield / ad-block OFF
- WAN already live on the Cox modem (public DHCP)
TOMORROW MORNING — cables + test
- Pull SonicWall (.1) and USG; patch the office switch into the Pro's LAN port.
- On one workstation:
ipconfig /renew-> expect SAME IP, gw .1, DNS .125/.135, internet up. - Log on as a user (Howard has passwords): Q: maps to \tps-server\Quickbooks (unchanged), open the company file — QB works exactly as yesterday. -> proves the network move broke nothing.
- Phones: dial tone / registration on all 3 Yealinks. NVR: local UI + remote view.
- Run
bash clients/prairie-schooner/verify-cutover.shfrom ClaudeTools for the scripted pass/fail readout.
Rollback: plug the SonicWall back in — nothing else was changed.
LATER (separate visit) — QB/file-server move to TPS-SVR
Data is already staged; refresh + cut when ready:
- QB closed everywhere -> re-run the robocopy delta (seconds).
- On TPS-SVR: create shares
New-SmbShare -Name Quickbooks -Path C:\Share\Quickbooks -FullAccess EveryoneNew-SmbShare -Name Deployment -Path C:\Share\Deployment -FullAccess "NT AUTHORITY\Authenticated Users" -ReadAccess Everyone - Install QB Database Server Manager (match their QB Desktop year) -> scan C:\Share\Quickbooks.
- GPMC: Default Domain Policy -> User Prefs -> Drive Maps -> Q: -> \tps-svr\Quickbooks.
- Relogon test on one PC, open company file multi-user.
- Flip Pro DHCP DNS order to .135, .125.
Then the AD retirement (unchanged)
FSMO transfer, CA migration (test Backup-CARoleService key export first), QB checks, demote TPS-SERVER + power off, real backup. Old server stays ON until this completes — it is still a DC, DNS (.125), CA, and (for now) the QB host.