139 lines
5.7 KiB
Markdown
139 lines
5.7 KiB
Markdown
# Session Log: 2026-04-02 - Multi-Client MSP Work
|
|
|
|
## Session Summary
|
|
|
|
Mixed MSP session covering three clients: Barbara Bardach (contact cleanup), Dataforth (MFA resets + auth policy), and ACE Portables (Bitdefender reinstall).
|
|
|
|
### Key Decisions
|
|
- Bardach contacts: Server-side data was clean (only 18 duplicate names out of 6,096 contacts). iPhone "duplicate" issue is likely Siri Suggestions or iOS display, not Exchange sync.
|
|
- Dataforth MFA: Discovered Microsoft Authenticator and SMS were both disabled at the tenant authentication methods policy level — root cause of users unable to register MFA.
|
|
- ACE Portables: Bitdefender agent lost communication with GravityZone cloud console. Approach: uninstall old agent, reinstall fresh from GravityZone package.
|
|
|
|
---
|
|
|
|
## Client: Barbara Bardach (bardach.net)
|
|
|
|
### Tenant Info
|
|
- Domain: bardach.net
|
|
- Tenant ID: dd4a82e8-85a3-44ac-8800-07945ab4d95f
|
|
- User: barbara@bardach.net
|
|
- User Object ID: 41d14430-feb4-4ae2-aed6-2bd4e6384ca7
|
|
|
|
### Work Performed
|
|
|
|
#### 1. Contact Duplicate Analysis
|
|
- Queried all 6,096 contacts via Graph API (7 pages of 999)
|
|
- Found 18 duplicate display names, 114 blank display names
|
|
- Only 1 name appeared 3x (Patsy Sable), rest were pairs
|
|
|
|
#### 2. Contact Dedup & Merge (19 contacts removed)
|
|
**Exact duplicates deleted (6 contacts):**
|
|
- Bardach, Mike; Brandon Lopez; Judi Carroll; Kelly Yang; Megan Carroll; Winter Williams
|
|
|
|
**Patsy Sable (3 copies → 1):**
|
|
- Deleted 1 exact work dupe (psable@longrealty.com)
|
|
- Merged psable@longrealty.com into personal contact (patsy@patsysable.com)
|
|
|
|
**Merged pairs (11 contacts — secondary emails/phones merged into keeper, dupe deleted):**
|
|
- Barbara Bardach, David Rodriguez, Denise Newton, Gina Beltran, Jessica Bonn, Kayla Manley, Maria Anemone, Mark Crager, Paula Williams, Randy Bonn, Susan Barry
|
|
|
|
Script: `temp/bardach_merge_contacts.py`
|
|
|
|
#### 3. Blank Display Name Fix (107 fixed)
|
|
- 113 contacts had blank displayName but had companyName
|
|
- Set displayName = companyName for 107 contacts
|
|
- 6 skipped (no usable data — no name, company, or email)
|
|
- These were business contacts stored only by company (e.g., "Viking River Cruises", "Wells Fargo", etc.)
|
|
|
|
Script: `temp/bardach_fix_blank_names.py`
|
|
|
|
#### Remaining iPhone Issue
|
|
- Server-side data is now clean
|
|
- iPhone duplicate perception likely caused by:
|
|
- Siri Suggestions for Contacts (Settings > Apps > Contacts > Siri & Search)
|
|
- iOS contact linking failures
|
|
- Recommended: Toggle Exchange contacts off/on on iPhone to force fresh sync
|
|
|
|
---
|
|
|
|
## Client: Dataforth
|
|
|
|
### Tenant Info
|
|
- Tenant ID: 7dfa3ce8-c496-4b51-ab8d-bd3dcd78b584
|
|
- Service Principal has: User Administrator + Exchange Administrator roles
|
|
|
|
### Work Performed
|
|
|
|
#### 1. MFA Reset — AJ Lopez & Ben Wadzinski
|
|
- **AJ Lopez (alopez@dataforth.com)** — Object ID: 0ee5a1d7-d418-4104-b18e-6a8387a9e01e
|
|
- Removed: phone auth method, email auth method
|
|
- Account enabled: true (unlocked)
|
|
- **Ben Wadzinski (bwadzinski@dataforth.com)** — Object ID: 39c5f047-7f52-4c7a-bab7-e2ef3061391a
|
|
- Removed: phone auth method
|
|
- Account enabled: true (unlocked)
|
|
|
|
#### 2. Authentication Methods Policy Fix
|
|
**Problem:** Both Microsoft Authenticator and SMS were DISABLED at the tenant level. Only Email was enabled. Users could not register MFA via Authenticator app or SMS.
|
|
|
|
**Fix:** Enabled both via Graph API PATCH to authentication methods policy:
|
|
- `MicrosoftAuthenticator` → enabled (was disabled)
|
|
- `Sms` → enabled (was disabled)
|
|
- Verified both show state: "enabled" after change
|
|
|
|
Both users should be prompted to re-register MFA on next sign-in.
|
|
|
|
---
|
|
|
|
## Client: ACE Portables (Melissa Lynch)
|
|
|
|
### Issue
|
|
- Bitdefender agent on one machine shows "Communication with the management console could not be established"
|
|
- Device does not appear in GravityZone cloud console
|
|
- Machine user: joanf (C:\Users\joanf)
|
|
|
|
### GravityZone Info
|
|
- Console: cloud.gravityzone.bitdefender.com
|
|
- Company: ACE Portables - Melissa Lynch_22299872
|
|
- 3 installation packages found for this company
|
|
- Best package: SYN-/5552092/22299872/1/1/1/1/1 (all modules enabled)
|
|
- Modules: Antimalware, Advanced Threat Control, Firewall, Network Protection, Content Control, Antiphishing
|
|
- Operation mode: Detection and prevention
|
|
|
|
### Resolution In Progress
|
|
1. Uninstall old agent: `& "C:\Program Files\Bitdefender\Endpoint Security\product.exe" /bdparams /silent uninstall`
|
|
- Note: Must use `&` prefix in PowerShell to avoid parser error with `/` operator
|
|
2. Download fresh package from GravityZone > Installation Packages > ACE Portables company filter
|
|
3. Install fresh package on machine
|
|
|
|
### Status: PENDING — awaiting uninstall completion and reinstall
|
|
|
|
---
|
|
|
|
## Credentials Used
|
|
|
|
### Graph API (Claude-MSP-Access)
|
|
- App ID: fabb3421-8b34-484b-bc17-e46de9703418
|
|
- Client Secret: ~QJ8Q~NyQSs4OcGqHZyPrA2CVnq9KBfKiimntbMO
|
|
- Source: SOPS vault `msp-tools/claude-msp-access-graph-api.sops.yaml`
|
|
|
|
### Tenant IDs
|
|
- Bardach.net: dd4a82e8-85a3-44ac-8800-07945ab4d95f
|
|
- Dataforth: 7dfa3ce8-c496-4b51-ab8d-bd3dcd78b584
|
|
|
|
---
|
|
|
|
## Infrastructure Notes
|
|
|
|
- Installed Python 3.12.10 on Windows workstation via `winget install Python.Python.3.12`
|
|
- Path: `C:\Users\guru\AppData\Local\Programs\Python\Python312`
|
|
- Must add to PATH in bash: `export PATH="/c/Users/guru/AppData/Local/Programs/Python/Python312:/c/Users/guru/AppData/Local/Programs/Python/Python312/Scripts:$PATH"`
|
|
|
|
## Files Created
|
|
- `temp/bardach_merge_contacts.py` — Contact dedup/merge script
|
|
- `temp/bardach_fix_blank_names.py` — Blank displayName fix script
|
|
|
|
## Pending Tasks
|
|
- ACE Portables: Complete Bitdefender uninstall/reinstall on joanf's machine
|
|
- Barbara Bardach: Follow up on iPhone display — have her check Siri Suggestions setting and toggle Exchange contacts off/on
|
|
- Bardach: 6 contacts with no usable data (no name, company, email, or phone) still exist — may want to review/delete
|