Home»Time Entries Audit loading ... [hide int notes] generated 8/8/2026 at 10:40:01 pm took 1.63 seconds version: b85cbb8 helpers: v2
Territory: BMS Month: « Apr 2026 » Company: all Ticket: all User: all Type: all Role: Standard Technician [x] Bill: all Timesheet: all 3/30 4/6 4/13 4/20 4/27 Board: all Entry Status: all Ticket Status: all Issue: Notes longer than 500 characters [x] [reset] Progress: 0% (0 of 13)
| row | id | Terr | Company | User | Date | Day | Start | End | Actual | Billed | Deduct | Inv Amt | Work Type | Work Role | Bill | Timesheet | Board | Entry Status | Ticket Status | Ticket # | Ticket Summary | Int Notes | Audit Done | Audit Notes | Notes | # issues | all issues | errors | warnings | notices |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 38817 | BMS | IC | fdrewett | 4/15 | 2:00 pm | 4:00 pm | 2.00 | 2.00 | 0 | 250.00 | Remote | Standard Technician | Billable | 4/13 | Projects | ReadyToBill | >Closed | 74350 | DCPROMO | 0 | DC promotion of INSIGHT-DC01 \(192.168.0.7\) as additional domain controller for Insight.local was hanging during initial replication pull from InsightPDC \(192.168.0.2\). Root cause was a broken secure channel \(Error 1749 — "The security context is invalid"\) combined with stale registry and database artifacts from the failed promotion attempt. Resolved by cleaning up the failed promotion state, unjoining/rejoining the domain with a fresh computer account, and re-running the DC promotion. Promotion completed successfully. Post-promotion verification passed — AD replication healthy across all partitions, DNS zones and SRV records confirmed, DC01 is ready for client DNS cutover. **Remaining:** * Transfer FSMO roles from InsightPDC to INSIGHT-DC01 * Update DHCP/static DNS to point clients to DC01 * Verify SYSVOL replication * Activate Windows license \(113 days remaining\) * Monitor replication 24–48 hrs, then demote/decommission InsightPDC | 2 | Notices: Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | |||||
| 2 | 38988 | BMS | CT | fdrewett | 4/20 | 7:00 am | 8:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74499 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations | 0 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations Incident: https://bms.huntress.io/org/295830/infection\_reports/2093168 Summary: Huntress detected a successful suspicious authentication to M365 account charlotteb@couragenm.com on 2026-04-20 12:51:16 UTC from 47.253.180.189 \(Alibaba Cloud - US, Virginia\) using user agent axios/1.15.0 against the OfficeHome application. Device was non-compliant/unmanaged. Axios UA is associated with Phishing-as-a-Service kits and automated credential validation / session hijacking. Huntress auto-revoked sessions and disabled the identity. IOCs: - User: charlotteb@couragenm.com - Src IP: 47.253.180.189 \(Alibaba Cloud - US\) - User Agent: axios/1.15.0 - Session ID: 00401e2a-2a11-ede3-62cf-26b1d4d97c1e - App: OfficeHome \(4765445b-32c6-49b0-83e6-1d93765276ca\) - Device: Non-compliant, Unmanaged Remediation actions completed: 1\. Contained account in M365 admin center — reset password to a new strong value, blocked sign-in, and initiated sign-out to revoke all refresh tokens\. 2\. Verified per-user MFA status: Enforced\. 3\. Audited registered MFA / authentication methods in Entra for charlotteb — no unfamiliar phone numbers, Authenticator registrations, or alternate emails\. No attacker-registered methods present\. 4\. Reviewed Entra sign-in logs for the user — no additional suspicious successful sign-ins identified beyond the Huntress-flagged event; no 'Previously satisfied' MFA from foreign IPs observed\. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 3 | 39336 | BMS | HH | fdrewett | 4/24 | 8:15 am | 2:00 pm | 5.75 | 5.75 | 0 | 862.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | BitTitan MigrationWiz environment build-out for the Google Workspace to Microsoft 365 migration. Configured the Google Workspace source endpoint: created the GCP project, created the service account and JSON key, enabled the Gmail, Drive, Calendar, Contacts and Admin SDK APIs, and granted domain-wide delegation for the BitTitan OAuth scopes. Configured the Microsoft 365 destination endpoint: registered the MigrationWiz application in Entra ID, granted modern authentication consent, and provisioned the dedicated migration admin account. Extended troubleshooting of the Microsoft consent and authentication flow before Verify Credentials would pass against both endpoints. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 4 | 39650 | BMS | HH | fdrewett | 4/27 | 1:00 pm | 5:00 pm | 4.00 | 4.00 | 0 | 600.00 | Remote | Standard Technician | Billable | 4/27 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | Built out the migration source data set. Updated the user tracking sheet against the current Google Admin export, then reviewed the full account list line by line with Jesse Hugg to confirm who migrates, who is archived, and how aliases and shared mailboxes are handled. Cleaned up and imported the finalized user list into MSPComplete via CSV and applied User Migration Bundle licensing. Created the Document migration project for My Drive to OneDrive and pre-provisioned each user's OneDrive so the Drive data had a destination to land in. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 5 | 37972 | BMS | IC | mleasure | 4/1 | 12:50 pm | 2:00 pm | 1.17 | 1.25 | 0 | 156.25 | Remote | Standard Technician | Billable | 3/30 | Projects | ReadyToBill | >Closed | 73512 | Audit SBS Server Roles | 0 | \*\*Audit SBS Server Roles – InsightPDC\*\* Completed audit of installed roles and services on existing SBS server \(InsightPDC\). \*\*Installed Roles Identified:\*\* \* Active Directory Domain Services \(AD DS\) \* DNS Server \* DHCP Server \(scope inactive\) \* File Services \(File Server, DFS Namespace, BranchCache\) \* Print Services \(multiple shared printers\) \* Windows Server Backup \*\*Additional Components:\*\* \* SMBv1 enabled \(client and server\) \* PowerShell 2.0 engine present \* Group Policy Management installed \*\*Service Summary:\*\* \* Server is functioning as: \* Domain Controller \* DNS Server \* Legacy File Server \(usage unconfirmed\) \* Print Server \* DHCP role present but appears inactive on this server \*\*Notes:\*\* \* DFS role installed but no namespaces configured \* Presence of legacy components \(SMBv1, PSv2\) noted for cleanup post-migration | 2 | Notices: Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | |||||
| 6 | 37975 | BMS | IC | mleasure | 4/1 | 2:01 pm | 2:21 pm | 0.33 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 3/30 | Projects | ReadyToBill | >Closed | 73513 | Document Current Domain Configuration | 0 | \*\*Document Current Domain Configuration – Insight.local\*\* Captured baseline snapshot of Active Directory environment prior to migration. --- \*\*Domain Overview:\*\* \* Domain Name: Insight.local \* Domain Controllers: \* InsightPDC \(Primary\) \* InsightBDC \(Secondary\) --- \*\*FSMO Roles:\*\* \(All roles currently held by InsightPDC\) \* Schema Master \* Domain Naming Master \* PDC Emulator \* RID Master \* Infrastructure Master --- \*\*AD Sites and Subnets:\*\* \* Site: Default-First-Site-Name \* No custom AD subnets configured \* All domain controllers reside in the default site --- \*\*DNS Configuration:\*\* \* AD-integrated zones: \* Insight.local \* \_msdcs.Insight.local \* Reverse lookup zone configured \(192.168.0.x\) \* DNS server in use: 192.168.0.2 \(InsightPDC\) \* DNS records/zones reviewed \(export pending or completed per project requirements\) --- \*\*DHCP Configuration:\*\* \* Scope: 192.168.0.0/24 \(inactive on InsightPDC\) \* Authorized DHCP servers: \* 192.168.0.2 \(InsightPDC\) \* 192.168.0.24 \(InsightBDC – likely active DHCP server\) \* DHCP options configured: \* Router: 192.168.0.1 \* DNS: 192.168.0.2 \* Domain: Insight.local \* No DHCP reservations found on InsightPDC --- \*\*File Services:\*\* \* Legacy share structure present on InsightPDC \(E:\\File Shares\) \* Evidence suggests partial migration or remapping already performed \* Active usage of this server as file server requires validation --- \*\*Print Services:\*\* \* Shared printers hosted on InsightPDC \(HP DesignJet, Ricoh devices\) --- \*\*Domain / Forest Functional Levels:\*\* \* Domain Functional Level: Windows2012Domain \* Forest Functional Level: Windows2012Forest --- \*\*General Notes:\*\* \* Environment appears mid-transition \(file services partially migrated\) \* InsightPDC remains critical infrastructure due to FSMO role ownership \* Snapshot captured prior to migration changes; supporting data to be stored in project documentation | 2 | Notices: Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | |||||
| 7 | 37976 | BMS | IC | mleasure | 4/1 | 2:21 pm | 2:51 pm | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 3/30 | Projects | ReadyToBill | >Closed | 73514 | GPO Review | 0 | \*\*GPO Audit – SBS Migration Review\*\* Completed initial review and backup of Group Policy Objects. \*\*Actions Completed:\*\* \* All GPOs backed up successfully \* GPO list and XML report generated for review --- \*\*Findings:\*\* \*\*SBS-Specific Policies Identified:\*\* \* SBS Group Policy Security Templates \(disabled\) \* SBS Group Policy Folder Redirection \*\*File / User Dependency Policies:\*\* \* Folder Redirection policy present \(high impact\) \* Drive Maps GPO present \* Likely contains references to legacy file server paths \*\*Print Deployment Policies:\*\* \* Multiple printer deployment GPOs identified: \* Printers - Map Plotter \* Printers - Color - Allowed Only \* Printers - Black White - Everyone \* Likely dependent on current server hosting print services \*\*General Policies:\*\* \* Internet Security Settings GPO present \(non-SBS, appears standard\) --- \*\*Risk Areas Identified:\*\* \* Folder redirection may reference legacy server paths \* Drive mappings may break after file server migration \* Printer mappings may fail if print services are moved --- \*\*Next Steps:\*\* \* Review folder redirection paths before migration \* Validate drive mappings and update to new file server \* Plan printer migration and update GPO references \* Remove or replace SBS-specific policies post-migration --- \*\*Notes:\*\* \* No changes made during this phase \(discovery only\) \* GPO backup available for rollback if required | 2 | Notices: Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | |||||
| 8 | 38795 | BMS | IC | mleasure | 4/15 | 10:20 am | 11:59 am | 1.65 | 1.75 | 0 | 218.75 | Remote | Standard Technician | Billable | 4/13 | Projects | ReadyToBill | >Closed | 74318 | Join to the Domain | 0 | Began deployment of new domain controller for Insight.local to replace existing DC \(INSIGHTPDC\). Performed pre-deployment health checks on current domain controller: \* Ran dcdiag /v, repadmin /replsummary, and repadmin /showrepl \* Verified no replication errors or critical issues \* Confirmed SYSVOL and DFSR are functioning properly \* Confirmed all FSMO roles currently reside on INSIGHTPDC Prepared new server for domain controller role: \* Assigned static IP configuration \* Configured DNS to point to existing domain controller \* Joined to Insight.local domain Installed Active Directory Domain Services \(AD DS\) role with management tools Initiated promotion to domain controller \(Install-ADDSDomainController\) with DNS and Global Catalog enabled Promotion currently in progress. Post-installation validation and replication checks to follow prior to FSMO role transfer and decommissioning of legacy domain controller. | 2 | Notices: Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | |||||
| 9 | 38876 | BMS | IC | mleasure | 4/16 | 1:15 pm | 1:29 pm | 0.23 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/13 | Projects | ReadyToBill | In Progress | 73518 | Verify AD Replication | 0 | Validated Active Directory replication health following promotion of INSIGHT-DC01. \* Executed repadmin /replsummary and repadmin /showrepl \* Confirmed successful bidirectional replication between INSIGHTPDC and INSIGHT-DC01 \* Observed 0 replication failures across all naming contexts \* Verified both domain controllers are present in Sites and Services and communicating properly \* Confirmed SYSVOL and NETLOGON shares are accessible on INSIGHT-DC01 Replication is currently healthy with no errors. Continued monitoring during transition period. | 2 | Notices: Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | |||||
| 10 | 38878 | BMS | IC | mleasure | 4/16 | 2:05 pm | 2:36 pm | 0.52 | 0.75 | 0 | 93.75 | Remote | Standard Technician | Billable | 4/13 | Projects | ReadyToBill | In Progress | 73517 | Migrate DNS to New DC | 0 | Migrated DNS services to INSIGHT-DC01 and validated functionality. \* Confirmed DNS role installed and operational on INSIGHT-DC01 \* Verified AD-integrated zones replicated successfully \* Updated DNS client settings on domain controllers: \* INSIGHT-DC01 pointing to itself as primary DNS \* INSIGHTPDC updated to reference INSIGHT-DC01 \* Verified internal name resolution \(insight.local\) resolves to both domain controllers \* Verified external DNS resolution via configured forwarders \* Confirmed SRV records \(\_ldap.\_tcp.dc.\_msdcs\) include both domain controllers Environment is now actively resolving through INSIGHT-DC01. Monitoring client DNS transition prior to decommissioning INSIGHTPDC. | 2 | Notices: Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | |||||
| 11 | 38713 | BMS | NMFFL | rclingan | 4/14 | 2:00 pm | 3:00 pm | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/13 | Help Desk 2.1 | Billed | -Closed | 74211 | Fw: Proposal Meeting: NM Financial and Family Law meeting with SEGRA | 0 | Ring network vs lateral Dual uplinks 645 xfinity internet 775 xfinity voice Extension from 2nd floor for internet no equipment in closet 100 Mb/s 575 200 Mb/s 650 36 Month Terms 1 static fiber Call pricing 305 monthly One time 245 10 handsets 2 trio handsets 1 911 fee 880 total monthly w/ 575 monthly network costs 955 total w/200 mb/s service UCAS integrated to teams potentially in the future Main advantage will be the ability to set and change hunt groups extensions forwards etc without getting support involved through Sky voice administration interface | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 12 | 38845 | BMS | SVC | rclingan | 4/16 | 8:20 am | 9:00 am | 0.67 | 0.75 | 0 | 93.75 | Remote | Standard Technician | Billable | 4/13 | Help Desk 2.1 | Billed | -Closed | 74300 | iPads for patient check in | 0 | Researched Ipad signature capture app, it still exists at 19.99 found crystalPM pdf on application setup for windows side [Help Center - Signature Pad's](https://help.crystalpm.com/hardware/signature-pads#h.xe7dk5opxxw) called support for verification on if this application is still supported and for any necessary requirements - awaiting callback discuss options with frank between topaz signature pad and the ipad both have their own difficulties and challenges, we need to await crystal callback for updated information before making a decision. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 13 | 39172 | BMS | CTCPA | rclingan | 4/22 | 2:58 pm | 3:11 pm | 0.22 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 75204 | New Computer Info for remote desktop setup | 0 | The main benefit of a desktop accessed via remote desktop versus a laptop connected through VPN is connection stability between the client machine and the applications/databases on the server. On the local network, the desktop has a wired gigabit connection directly to the server. A laptop connected over VPN, on the other hand, would realistically see speeds closer to 100 Mb/s at best — roughly 10% of local speed — since it's limited by our upload speed and the user's download speed. Beyond the raw speed difference, the VPN connection is also more susceptible to latency, instability, and potential data corruption due to the lower available bandwidth and any drops along the way. For line-of-business applications that are constantly reading and writing to the server, a remoted desktop provides a much more reliable experience. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters |
Legend:
(hover over fields for details)
Tickets with over 5 hours in the current view (1)
| Hours | Ticket # | Company | Ticket Summary |
|---|---|---|---|
| 96.00 | 71559 | HH | Migration to M365 Time Tracking |
Notices
| Field | Message | Count |
|---|---|---|
| Board | Board not 'Help Desk' or 'Help Desk 2.1' | 7 |
| Notes | Notes longer than 500 characters | 13 |
| Total | 20 | |