Home»Time Entries Audit loading ... generated 8/7/2026 at 12:37:58 pm took 0.33 seconds version: 5436fa4 helpers: v2

Territory: BMS Date: 7/6/26 [x] Company: all Ticket: all User: all Type: all Role: Standard Technician [x] Bill: all Timesheet: all  7/6 Board: all Entry Status: all Ticket Status: all Issue: all [reset] Progress: 100% (3 of 3)

row id Terr Company User Date Day Start End Actual Billed Deduct Inv Amt Work Type Work Role Bill Timesheet Board Entry Status Ticket Status Ticket # Ticket Summary Int Notes Audit Done Audit Notes Notes # issues all issues errors warnings notices
1 42274 BMS SVC fdrewett 7/6 12:00 am 2:30 am 2.50 2.50 0 312.50 Remote Standard Technician Billable 7/6 Help Desk 2.1 PendingApproval -Closed 79047 File Server Migration Tue 7/7/2026 10:44 PM MDT - Time Entry has been split into multiple records due to spanning overnight from 7/5/2026 2:00:00 PM thru 7/6/2026 2:30:00 AM 1 8/6 CS duplicate notes ok, internal notes ok, long notes ok 2026-06-17    Discovery    Assessment of legacy file server \(dsrv1\): inventoried shares, permissions, storage utilization, ~2.6M file baseline, mapped drives, and connected instruments/devices to scope migration plan    2.5 Pre-cutover    Build & Prep    Built new file server \(Server 2022\), joined domain, recreated share structure matching source, remediated NTFS permissions \(removed orphaned ACL entries, cleaned legacy profile artifacts\)    3.0 Pre-cutover    Data Migration    Performed baseline data copy of ~892GB / 2.6M files from legacy server to new server; validated copy integrity    2.5 2026-07-06    Cutover    After-hours cutover: final delta sync and verification, decommissioned legacy server identity, migrated server name/IP to new hardware, re-registered DNS, validated share access and read/write from client workstation    3.5 2026-07-06    Cutover Support    Troubleshooting during cutover \(AD object cleanup requiring recursive removal, IP reassignment conflict resolution\)    1.0 2 Notices: Int Notes: Internal notes, Notes: Notes longer than 500 characters Int Notes: Internal notes, Notes: Notes longer than 500 characters
2 42272 BMS OMNI fdrewett 7/6 8:00 am 11:00 am 3.00 3.00 0 375.00 Remote Standard Technician Billable 7/6 Help Desk 2.1 PendingApproval -Closed 77009 Encino Metals Time Tracking 0 Time tracking for working with Prewire on getting the Scope of work document and working with Lucero on her questions 0
3 42271 BMS OMNI fdrewett 7/6 11:00 am 12:00 pm 1.00 1.00 0 125.00 Remote Standard Technician Billable 7/6 Help Desk 2.1 PendingApproval -Closed 77009 Encino Metals Time Tracking 0 Fernando picking up the equipment for El Paso 0
4 42207 BMS PPT fdrewett 7/6 12:00 pm 12:00 pm 0.00 0.00 0 - Remote Standard Technician Billable 7/6 Help Desk 2.1 PendingApproval -Closed 78982 Fwd: Paradigm Physical Therapy & Wellness - Los Lunas · Los Lunas, NM 0 Spoke to Celeste and we are thinking this is a spam message. 0
5 42269 BMS PPT fdrewett 7/6 1:15 pm 2:00 pm 0.75 1.00 0 25.00 Travel Standard Technician Billable 7/6 Help Desk 2.1 PendingApproval -Closed 78827 Quickbooks Online Migration 1 8/6 CS missing notes not an issue here 1 Notices: Notes: Missing notes for travel Notes: Missing notes for travel
6 42268 BMS PPT fdrewett 7/6 2:00 pm 3:00 pm 1.00 1.00 0 125.00 Onsite Standard Technician Billable 7/6 Help Desk 2.1 PendingApproval -Closed 78827 Quickbooks Online Migration 0 onsite with Loraine - recovered her Intuit account and we were able to connect to QuickBooks Online. 0
7 42190 BMS HH rclingan 7/6 8:30 am 10:15 am 1.75 1.75 0 218.75 Remote Standard Technician Billable 7/6 Help Desk 2.1 Open -Closed 76540 IT questionnaire 0 Finished updating audit response after meeting thursday. Sent response to client. 0
8 42197 BMS HH rclingan 7/6 10:15 am 11:05 am 0.83 1.00 0 125.00 Remote Standard Technician Billable 7/6 Help Desk 2.1 Open -Closed 78984 clock app not allowed on intune mdm phones 0 research issue, app needs to be enabled in managed play store. enable clock app and calculator application. wait for applications to appear in intune section to set assignments to required. 0
9 42194 BMS HH rclingan 7/6 10:43 am 10:47 am 0.07 0.25 0 31.25 Remote Standard Technician Billable 7/6 Help Desk 2.1 Open -Closed 78980 Fw: Locked out of work phone 0 reset user pin and shared with user. 0
10 42225 BMS HH rclingan 7/6 11:05 am 11:30 am 0.42 0.50 0 62.50 Remote Standard Technician Billable 7/6 Help Desk 2.1 Open -Closed 78984 clock app not allowed on intune mdm phones 0 added further apps to work applications. 0
11 42361 BMS IC rclingan 7/6 11:30 am 12:20 pm 0.83 1.00 0 125.00 Remote Standard Technician Billable 7/6 Help Desk 2.1 Open -Closed 68298 Server & User Cal 0 grabbed server license key from business center on courtneys account. 0
12 42358 BMS IC rclingan 7/6 7:30 pm 8:00 pm 0.50 0.50 0 62.50 Remote Standard Technician Billable 7/6 Help Desk 2.1 Open -Closed 78900 Fraud Email 0 remediation on another email breach. same datacenter ip addresses for logins, user breached had MFA enabled Token/aitm attack pattern consistent across breached accounts. we will need to setup conditional access policies to prevent these attacks. 0
13 42354 BMS IC rclingan 7/6 8:00 pm 10:00 pm 2.00 2.00 0 250.00 Remote Standard Technician Billable 7/6 Help Desk 2.1 Open -Closed 78900 Fraud Email 1 8/6 CS long notes ok TICKET NOTES — M365 Licensing Audit & Identity Security Scoping WORK PERFORMED: - Exported tenant license assignments via Graph PowerShell \(Get-MgSubscribedSku / Get-MgUser\); built SKU GUID-to-name map - Analyzed 179 accounts: 82 unlicensed \(shared mailboxes/service accts\), 68 Business Basic, 24 Business Standard, 3 Office 365 E3 - FINDING: Zero Entra ID P1 in tenant. Conditional Access not possible on current licensing. Note: O365\_BUSINESS\_PREMIUM SKU = Business Standard \(legacy naming\), not Business Premium - Exported per-user mailbox sizes via ExchangeOnlineManagement \(Get-EXOMailboxStatistics\). Resolved module install + WAM broker auth failure \(-DisableWAM\) - Cross-referenced mailbox sizes against license tiers to build three-tier licensing recommendation ENVIRONMENT NOTES: - On-prem AD \(no Entra Connect sync currently\), ESXi host w/ Sage server + DC, NAS, 2 sites w/ S2S VPN - ~24 desktop users on AD accounts; ~12 field laptops on LOCAL accounts \(unmanaged\) - NinjaRMM on all PCs incl. field laptops; Huntress EDR + ITDR \(retain\); Inky Phish Fence \(displace w/ Defender for O365 P1 — client wants off Inky post-Kaseya acquisition\) RECOMMENDATION SUMMARY: - Phase 1 \(38 hrs\): AD prep/IdFix/UPN alignment, Entra Connect w/ PHS + hybrid join, Intune auto-enroll GPO, CA policy set \(report-only -> enforce\), MFA/passkey rollout - Phase 2 \(20 hrs\): Field laptop migration remote via Ninja — Autopilot hash collection, ProfWiz local-to-Entra profile migration, no device collection needed - Phase 3 \(50 hrs, modular\): Intune foundation, Autopilot, app deployment, Defender for Business as AV layer under Huntress, Defender for O365 P1 + Inky cutover, MAM - Licensing: 38x Business Premium \(24 Standard upgrades, 3 E3 swaps, 11 Basic w/ mailboxes >F3 2GB limit\), 57x F3 + DfO add-on \(phone-profile field users\). Est. delta ~+$632/mo, partially offset by Inky cancellation - Pending: laptop-to-user mapping from Ninja inventory — any F3-slated user w/ company laptop moves to Premium DELIVERABLES: - One-page proposal doc \(scope/hours/licensing\) - Per-user license recommendation CSV \(95 users w/ rationale\) NEXT STEPS: - Pull device-to-user assignments from NinjaRMM - Client decision on Huntress Managed SAT \(no conflict w/ BP licensing — attack sim requires DfO P2, not included\) 1 Notices: Notes: Notes longer than 500 characters Notes: Notes longer than 500 characters

Legend:
(hover over fields for details)

Error (0)
Warning (0)
Notice (4)


Notices

Field Message Count
Int Notes  Internal notes  1
Notes  Missing notes for travel  1
Notes  Notes longer than 500 characters  2
Total  4


42274 - fdrewett - 7/6 12:00 am - 79047 - File Server Migration
Notes longer than 500 characters
Internal notes

42269 - fdrewett - 7/6 1:15 pm - 78827 - Quickbooks Online Migration
Missing notes for travel

42354 - rclingan - 7/6 8:00 pm - 78900 - Fraud Email
Notes longer than 500 characters