claudetools/clients/wolkin/session-logs/2026-06/2026-06-25-howard-scanner-scan-to-folder-front-static-ip.md

User

• User: Howard Enos (howard)
• Machine: Howard-Home
• Role: tech

Session Summary

Resolved a front-desk scanner failure at Wolkin Law: the Sharp MX-B557F could not scan to the \\front\scans SMB share and reported "invalid share name." Diagnosed the root cause as fragile workgroup name resolution — the office is a workgroup with no DNS/WINS authority for the hostname "front," so the name only resolves via broadcast (NetBIOS/LLMNR), which Bob's desktop happened to do but the scanner could not. The laptop additionally had a leftover hosts override (10.147.19.199 FRONT) from the ZeroTier remote-access setup that pinned the name to the ZT IP in-office.

Pinned FRONT to a static IP using its exact current values (192.168.1.153/24, gw 192.168.1.1, dns 192.168.1.1) via RMM so the scanner can target the IP reliably. The netsh change blipped the agent (status interrupted, "Agent restarted during execution") but it reconnected on the same IP; verified PrefixOrigin=Manual, DHCP=Disabled, gateway reachable. Identified the gateway as a Verizon Fios Router — no admin credentials in vault or 1Password, no remote recovery path (Fios uses a per-unit sticker password); recommended a DHCP reservation as the proper long-term fix once router access is obtained.

Verified the FRONT side was airtight before reconfiguring the scanner: Scans share exists (C:\Scans, Everyone+Administrators Full), FRONT\Localadmin enabled with non-expiring password and FullControl on C:\Scans. The user provided the scanner web-admin credential and later confirmed FRONT\Localadmin / r3tr0gradE99# as the SMB auth — both vaulted.

The user exported the printer settings (exported.zip, a Lexmark bundle — the MX-B557F is a rebadged Lexmark engine) and asked me to fix the scan destinations for re-import. Edited esf_settings.xml: removed the second broken eSF "Scan to Network" profile (\\FRONT\Scans2 / Owner — Scans2 share does not exist), corrected the surviving profile to 192.168.1.153\Scans (no leading \\ per the device's SMB connector, per user), set username localadmin and added the password. Reduced shortcuts.ucf to one native one-touch shortcut (DISPLAY=1, LABEL=Scan to Front, RUNIMMEDIATELY=1) for a home-screen one-click scan. Repackaged as exported-fixed.zip. The user reported a post-import error on deviceQuota — confirmed benign (that app has started=false, so the device skips its settings; must NOT be started or it would enforce print quotas).

Finally created Syncro ticket #32465 (Emergency - scanner scan-to-folder repair) for Robert Wolkin, posted a public work-summary note, and invoiced 1.0 hr emergency remote at $225.00 (invoice #67885). Confirmed no prepaid block before billing.

Key Decisions

• Set FRONT static with identical current values (not a new address) to eliminate blackout risk during the netsh change — the interface keeps the same IP/gw/dns, only the lease source changes.
• Pointed the scanner at the IP rather than fixing name resolution, because an IP needs no name resolution at all — the robust fix for an appliance on a nameless workgroup.
• Corrected eSF de_network_address to 192.168.1.153\Scans without the leading \\ per the user's instruction (the device's SMB connector prepends it). The native shortcuts.ucf keeps FOLDERPATH=\\192.168.1.153 because that is the device's own export format for that different field.
• Removed the second eSF profile entirely (pointed at the nonexistent Scans2 share as Owner) rather than repairing it — user wanted one profile.
• Did NOT hand-edit homescreen.json (FIXED layout) to add the home button — too risky to malform; used the UCF DISPLAY=1/RUNIMMEDIATELY=1 shortcut instead and documented the panel-side fallback.
• Did NOT enable the deviceQuota app to clear its import warning — it is configured to enforce print/copy/scan quotas, so starting it would cause a real problem. Leaving it skipped is correct.
• Billed emergency remote at $225.00 (product 26184, qty 1.0) after confirming prepay_hours: null via the full customer GET (not the search result).

Problems Encountered

• netsh static IP blipped the RMM agent — command returned interrupted ("Agent restarted during execution"). Resolved by waiting for reconnect (same IP) and re-reading config to confirm the static settings persisted.
• PowerShell 5.1 lacked -SkipCertificateCheck on the gateway/scanner HTTP fingerprint. Resolved by adding a System.Net.ServicePointManager.CertificatePolicy trust-all type.
• First eSF instance-removal script matched 4 <instance> blocks, not 2 — other eSF apps also use <instance>. Resolved by scoping the regex to the ssa_network <app> block before removing its 2nd instance; validated well-formed XML afterward.
• zip not available in Git Bash. Repackaged the bundle with .NET System.IO.Compression.ZipFile.CreateFromDirectory via PowerShell (files at archive root).
• Post-import deviceQuota error worried the user — confirmed pre-existing and benign (app started=false), unrelated to the scan edits.

Configuration Changes

• FRONT (192.168.1.153) — Ethernet (Intel I219-V) converted from DHCP to static: 192.168.1.153/24, gw 192.168.1.1, dns 192.168.1.1. DHCP disabled.
• C:\Users\Howard\Documents\ComputerGuru Connect v2\Files\exported-fixed.zip (new) — fixed Lexmark settings bundle. Original exported.zip left intact.
  • esf_settings.xml: removed 2nd ssa_network instance (guid A8, "front desk scans" -> \\FRONT\Scans2/Owner); surviving instance (guid A25, "scans") -> de_network_address=192.168.1.153\Scans, de_network_username=localadmin, added de_network_password.
  • shortcuts.ucf: reduced 2 shortcuts -> 1; DISPLAY=1, LABEL=Scan to Front, FILENAME=Scan, RUNIMMEDIATELY=1, FOLDERPATH=\\192.168.1.153, NAME=Scans, USERNAME=localadmin.
• Vault — created clients/wolkin/sharp-mfp.sops.yaml, clients/wolkin/front-localadmin.sops.yaml (both committed + pushed).
• Wiki — wiki/clients/wolkin.md: recorded FRONT static IP + MAC, scanner-must-use-IP detail, vault pointers, export-fix note.

Credentials & Secrets

• Sharp MX-B557F web admin (EWS) http://192.168.1.158 — admin / r3tr0gradE99#. Vault: clients/wolkin/sharp-mfp.sops.yaml.
• FRONT\Localadmin (Windows local admin on FRONT; scanner SMB auth to \\192.168.1.153\Scans) — localadmin / r3tr0gradE99# (same string as the MFP admin). Vault: clients/wolkin/front-localadmin.sops.yaml.

Infrastructure & Servers

• FRONT — office print/file server. LAN 192.168.1.153 (now static), ZeroTier 10.147.19.199. NIC Intel I219-V, MAC A0:AD:9F:95:C4:01. Win11 Home, workgroup. RMM agent id 877d311a-4b24-462c-97b1-d2a0f7730a71.
• Sharp MX-B557F MFP — 192.168.1.158 (rebadged Lexmark; web server Lexmark_Web_Server, FW MXTGW.081.215). Print raw TCP 9100, print share \\front\Sharp. Scan-to-folder -> \\192.168.1.153\Scans as FRONT\Localadmin.
• Gateway — Verizon Fios Router 192.168.1.1, MAC 74:90:BC:AD:C6:C5, web admin 80/443. No credentials held.
• C:\Scans on FRONT — scan target. Share Scans ACL Everyone+Administrators Full; NTFS grants Localadmin/Owner/julie/Administrators/SYSTEM FullControl.
• Office LAN 192.168.1.0/24; ZeroTier mesh 17d709436c834c9b (10.147.19.0/24).

Commands & Outputs

• Static IP: netsh interface ipv4 set address name="Ethernet" static 192.168.1.153 255.255.255.0 192.168.1.1 + set dnsservers ... static 192.168.1.1 primary. Verified PrefixOrigin=Manual, Dhcp=Disabled, gateway reachable.
• Gateway/scanner fingerprint via FRONT Invoke-WebRequest with trust-all CertificatePolicy (PS 5.1 has no -SkipCertificateCheck).
• eSF instance removal scoped to <app name="ssa_network"> block; XML validated with xml.dom.minidom.
• Repackage: [System.IO.Compression.ZipFile]::CreateFromDirectory($src,$out,Optimal,$false).

Pending / Incomplete Tasks

• User to import exported-fixed.zip via the EWS and run a test scan; confirm a PDF lands in C:\Scans. If auth fails, re-enter localadmin/r3tr0gradE99# on the panel once (export strips passwords).
• Home-screen button: if the "Scan to Front" shortcut does not auto-appear after import, add it via the panel (Home Screen Customization). homescreen.json was intentionally not edited.
• DHCP reservation for FRONT (A0:AD:9F:95:C4:01 -> .153) on the Verizon Fios router once admin access is obtained; then optionally revert FRONT to DHCP so the router DNS re-registers "front" (restores \\front name resolution fleet-wide) and drop the stale 10.147.19.199 FRONT hosts line on RSW-Laptop.
• Offered: live-watch C:\Scans via RMM during a test scan (not yet run).
• Pre-existing open follow-up: rotate front\julie (password transited RMM log during prior diagnosis).

Reference Information

• Syncro ticket #32465 (id 113088983) — https://computerguru.syncromsp.com/tickets/113088983 — status Invoiced.
• Syncro invoice #67885 (id 1650805533) — $225.00, 1.0 hr emergency remote (product 26184).
• Customer: Wolkin, Robert (id 796910), prepay_hours: null (no block).
• RMM: base http://172.16.3.30:3001; FRONT agent 877d311a-4b24-462c-97b1-d2a0f7730a71.
• Vault: clients/wolkin/sharp-mfp.sops.yaml, clients/wolkin/front-localadmin.sops.yaml.
• Files: C:\Users\Howard\Documents\ComputerGuru Connect v2\Files\exported.zip (original), exported-fixed.zip (fixed).