Files
claudetools/clients/prairie-schooner/cutover-runbook.md
Howard Enos 941de499c2 sync: auto-sync from HOWARD-HOME at 2026-07-14 19:13:30
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-07-14 19:13:30
2026-07-14 19:14:01 -07:00

3.4 KiB
Raw Blame History

The Prairie Schooner — Cutover Runbook

REVISED 2026-07-14 evening (Howard's call): decouple the two migrations. Tomorrow morning = NETWORK SWAP ONLY (SonicWall/USG out, UDM Pro in). Nothing else changes — Q: keeps pointing at \tps-server, QB keeps running off the OLD server. If QB works after the cable move, the network is proven. The QB/file-server move to TPS-SVR happens LATER as its own step with its own test. Companion file: udm-dhcp-plan.md (LAN/DHCP/reservations detail).

State as of tonight (all verified)

  • QuickBooks CLOSED everywhere: MEL-PC killed clean; TINA + JAYMI had kernel-zombie QBW (unkillable, hung SMB handle) -> users logged off, both machines rebooted, QBCFMonitorService stopped on all 3. Zero open handles on the server's Quickbooks share.
  • Data ALREADY STAGED on TPS-SVR (held in reserve for the later server move): robocopy delta completed 18:40 with FAILED=0 — Quickbooks 144.2 GB / Deployment 22.4 GB in C:\Share*. Company file: schoonerQB2025.QBW (2.9 GB) + consistent ND/DSN/TLG set.
  • Q: -> \tps-server\quickbooks via GPP in Default Domain Policy — NOT touched (stays on the old server for tomorrow's test).
  • Client-visible network today: gateway .1, DHCP from SonicWall, DNS handed = .125.

TONIGHT — UDM Pro config only (UniFi app, Pro LAN ISOLATED)

Values in udm-dhcp-plan.md. Summary:

  • LAN 192.168.1.1/24 (Pro takes the SonicWall's IP), domain tps.local
  • DHCP pool 192.168.1.100199
  • DNS handed to clients: .125, .135 — SAME primary as today. Zero observable change. (Flip to .135-first later, after the network is proven — that control is the point of this swap.)
  • 7 fixed-IP reservations: 3 PCs, 3 Yealink phones, Dahua NVR (MACs in the plan file)
  • Content filtering / DNS Shield / ad-block OFF
  • WAN already live on the Cox modem (public DHCP)

TOMORROW MORNING — cables + test

  1. Pull SonicWall (.1) and USG; patch the office switch into the Pro's LAN port.
  2. On one workstation: ipconfig /renew -> expect SAME IP, gw .1, DNS .125/.135, internet up.
  3. Log on as a user (Howard has passwords): Q: maps to \tps-server\Quickbooks (unchanged), open the company file — QB works exactly as yesterday. -> proves the network move broke nothing.
  4. Phones: dial tone / registration on all 3 Yealinks. NVR: local UI + remote view.
  5. Run bash clients/prairie-schooner/verify-cutover.sh from ClaudeTools for the scripted pass/fail readout.

Rollback: plug the SonicWall back in — nothing else was changed.

LATER (separate visit) — QB/file-server move to TPS-SVR

Data is already staged; refresh + cut when ready:

  1. QB closed everywhere -> re-run the robocopy delta (seconds).
  2. On TPS-SVR: create shares New-SmbShare -Name Quickbooks -Path C:\Share\Quickbooks -FullAccess Everyone New-SmbShare -Name Deployment -Path C:\Share\Deployment -FullAccess "NT AUTHORITY\Authenticated Users" -ReadAccess Everyone
  3. Install QB Database Server Manager (match their QB Desktop year) -> scan C:\Share\Quickbooks.
  4. GPMC: Default Domain Policy -> User Prefs -> Drive Maps -> Q: -> \tps-svr\Quickbooks.
  5. Relogon test on one PC, open company file multi-user.
  6. Flip Pro DHCP DNS order to .135, .125.

Then the AD retirement (unchanged)

FSMO transfer, CA migration (test Backup-CARoleService key export first), QB checks, demote TPS-SERVER + power off, real backup. Old server stays ON until this completes — it is still a DC, DNS (.125), CA, and (for now) the QB host.