claudetools/clients/wolkin/session-logs/2026-06-08-mike-wolkin-clientfiles-consolidation.md

Wolkin Law — Client Files share corrected (again), full data consolidation, VSS, desktop icons

User

• User: Mike Swanson (mike)
• Machine: GURU-BEAST-ROG
• Role: admin

Session Summary

Corrected the Wolkin Law ClientFiles share to the firm's real repository, consolidated client data scattered across three locations into that one canonical folder, enabled shadow copies on FRONT, and placed desktop shortcuts. All changes dispatched via GuruRMM to agent front (Wolkin, Robert — id 877d311a-4b24-462c-97b1-d2a0f7730a71); a second machine literally named front does NOT exist in RMM (the only similar name is FrontDeskReception, a different Rednour Law host).

Share repointed to the actual repository. The 2026-06-07 session had repointed \\front\ClientFiles from OneDrive\Documents\PRodriquezClients to C:\Users\Owner\OneDrive\Documents — but that was still wrong. The firm's live data is C:\Shared Data\CLIENT FILES (413 matter folders + a Closed Files subfolder, actively used, local not OneDrive) — exactly what the Mac's original notes recorded and the 06-07 session overrode. Repointed the SMB share ClientFiles to C:\Shared Data\CLIENT FILES, tightened the share ACL from Everyone:Full to Authenticated Users:Full, and granted front\julie NTFS Modify.

Desktop icons. Julie's laptop icon (\\front\ClientFiles) self-corrected via the share repoint (no laptop change). Added a Client Files icon to the Public Desktop on FRONT (local path C:\Shared Data\CLIENT FILES) and on Bob's desktop DESKTOP-V1JT1SE (UNC \\front\ClientFiles).

Shadow copies enabled on FRONT (Windows 11 Home — used WMI Win32_ShadowCopy.Create + a scheduled task, since vssadmin create shadow is Server-only). Allocated 90 GB shadowstorage on C: (930 GB / 534 GB free), took a baseline snapshot, and registered scheduled task "ACG VSS Shadow Copy C" running 07:00 + 12:00 daily as SYSTEM. Note: Win11 client does not surface the Explorer "Previous Versions" tab for local volumes — snapshots exist and are restorable admin-side (mount the shadow volume).

Consolidation (everything into C:\Shared Data\CLIENT FILES). Every move was preceded by a list-only safety check and backstopped by the VSS snapshot + OneDrive cloud recycle bin.

• Deleted stale OneDrive\Shared Data\Client Files (178 files) after a robocopy /L proved 0 unique/newer (all "Older"). Client Files and CLIENT FILES there were the same folder (Windows case-insensitive).
• Moved 13 stray closed matters from OneDrive\Documents into CLIENT FILES\Closed Files (count-verified), dropped 4 empty junk folders (Downloads, New folder, Sound recordings, Zoom). Eskandari merged into a pre-existing closed folder.
• OneDrive\Documents held 687 files unique to it + 5 newer (an old-but-not-subset copy). Additively merged (robocopy /XO /E, never overwriting a newer canonical file, junk excluded) into the matching matter folders; quarantined 67 loose root files to CLIENT FILES\Closed Files\_From OneDrive Documents for Bob to file. The one cloud-only OneDrive placeholder folder ("Prestini, Pino", a reparse point robocopy skips) was verified by relative-path comparison to be 100% present in canonical (74 files, 0 unique) and removed. Post-merge re-diff: 0 unique remaining. OneDrive\Documents emptied (folder shell kept so OneDrive's known-folder isn't disrupted).
• Killed defunct sync cruft in both Shared Data roots (no Resilio/ownCloud process running): ownCloud journals/logs (.csync_journal.db*, .owncloudsync.log*) and Resilio state (.sync, BTS Key - ...). Preserved real files (CASE LIST.docx, Run Payroll.lnk, Scans.lnk).

Key Decisions

• C:\Shared Data\CLIENT FILES is the canonical repository, not any OneDrive path. It is local, active (newest 2026-06-05), and the largest/most complete. The OneDrive copies were stale/partial predecessors from a prior Resilio/ownCloud sync arrangement.
• Merge, never blind-delete. OneDrive\Documents was NOT a clean duplicate (687 unique files) — deleting it would have lost real matter files. Used additive /XO merge so canonical's newer versions are never overwritten and nothing unique is lost.
• Loose root files quarantined, not dumped into the matter root — they went to Closed Files\_From OneDrive Documents so the clean 413-matter structure stays clean and Bob can file them.
• Gated Resilio cruft deletion on whether Resilio was running (it wasn't) to avoid disrupting a live sync.
• Share name kept "ClientFiles" so Julie's existing shortcut + the laptop icon resolve unchanged.
• VSS via WMI on Win11 Home (not vssadmin create, which is Server-only).

Problems Encountered

• The 06-07 "fix" pointed the share at OneDrive\Documents, which was itself wrong — the real folder is the local C:\Shared Data\CLIENT FILES. Root cause: the firm's data had been migrated from an OneDrive/Resilio-synced Shared Data to a local C:\Shared Data, leaving multiple stale copies.
• robocopy does not recurse OneDrive Files-On-Demand reparse-point placeholders, so the "Prestini, Pino" cloud-only folder was skipped by the bulk merge. Verified its 74 stub files against canonical by relative path (all present) before removing it.
• query user on FRONT returned empty (no interactive user logged in) — caused a benign non-zero exit on the first recon script; all output was still produced.

Configuration Changes

GuruRMM-dispatched changes to FRONT (877d311a-4b24-462c-97b1-d2a0f7730a71), no repo code changes:

• SMB share ClientFiles repointed C:\Users\Owner\OneDrive\Documents -> C:\Shared Data\CLIENT FILES; share ACL Everyone:Full -> Authenticated Users:Full; NTFS front\julie:(OI)(CI)M.
• VSS: vssadmin resize shadowstorage /for=C: /on=C: /maxsize=90GB; baseline Win32_ShadowCopy.Create('C:\','ClientAccessible'); scheduled task "ACG VSS Shadow Copy C" (07:00 + 12:00 daily, SYSTEM).
• Public Desktop shortcut Client Files.lnk -> C:\Shared Data\CLIENT FILES.
• Data consolidation into C:\Shared Data\CLIENT FILES (see Summary); deleted stale OneDrive copies + sync cruft.
• DESKTOP-V1JT1SE (30f6af79-ab19-4ed3-9ebc-71b2bffc2d27): Public Desktop shortcut Client Files.lnk -> \\front\ClientFiles.

Credentials & Secrets

• front\julie local account (password recorded in the 2026-06-07 log) — still pending migration to vault clients/wolkin/. None created/changed this session.

Infrastructure & Servers

• FRONT (Wolkin office PC / print server): Windows 11 Home, C: 930 GB / 534 GB free, LAN 192.168.1.153, ZeroTier 10.147.19.199. Canonical repo C:\Shared Data\CLIENT FILES (413 matters).
• RSW-Laptop (Julie): 043fd673-35a2-4d3d-8f91-ed73ce70cc1e. DESKTOP-V1JT1SE (Bob): 30f6af79-ab19-4ed3-9ebc-71b2bffc2d27.
• ZeroTier network 17d709436c834c9b. M365 tenant rswolkin.com.

Commands & Outputs

• Repoint: Remove-SmbShare ClientFiles + New-SmbShare -Name ClientFiles -Path 'C:\Shared Data\CLIENT FILES' -FullAccess 'NT AUTHORITY\Authenticated Users' + icacls ... /grant front\julie:(OI)(CI)M.
• Safety diff: robocopy <src> <canon> /L /E /FP /NJH /NJS /NDL /NP /NS /XX — buckets "New File" / "Newer" / "Older".
• Merge: robocopy <src> <canon> /E /XO /XF desktop.ini Thumbs.db debug.log *.tmp ~* *.rdp *.lnk.
• VSS: vssadmin resize shadowstorage, Win32_ShadowCopy.Create, Register-ScheduledTask.

Pending / Incomplete Tasks

• Bob: sort the 67 files in CLIENT FILES\Closed Files\_From OneDrive Documents into their matters. (Bob has been notified.)
• Migrate front\julie password to vault clients/wolkin/.
• Update wiki/clients/wolkin.md Network section: office LAN is 192.168.1.0/24 (not 172.17.110.x), printer is Sharp MX-B557F @ 192.168.1.158, and the ClientFiles share path is now C:\Shared Data\CLIENT FILES.
• Consolidate the three Wolkin client slugs (wolkin / wolkin-law / rswolkin) into one canonical slug.

Reference Information

• Syncro ticket #32369 (Remote Work Access Setup).
• Agents: front 877d311a-4b24-462c-97b1-d2a0f7730a71; RSW-Laptop 043fd673-35a2-4d3d-8f91-ed73ce70cc1e; DESKTOP-V1JT1SE 30f6af79-ab19-4ed3-9ebc-71b2bffc2d27.
• Final canonical state: CLIENT FILES = 413 matter folders + 127 root files; Closed Files = 113 folders; review subfolder _From OneDrive Documents = 67 files.
• VSS baseline ShadowID {CF539C17-8DFA-43E5-BE6D-4F1C19FAD49E} (2026-06-08 09:04).