Home»Time Entries Audit loading ... [hide int notes] generated 8/8/2026 at 9:34:48 pm took 0.51 seconds version: b85cbb8 helpers: v2
Territory: BMS Month: « Apr 2026 » Company: all Ticket: all User: fdrewett [x] Type: all Role: all Bill: all Timesheet: all 3/30 4/6 4/13 4/20 4/27 Board: all Entry Status: all Ticket Status: all Issue: Notes longer than 500 characters [x] [reset] Progress: 0% (0 of 4)
| row | id | Terr | Company | User | Date | Day | Start | End | Actual | Billed | Deduct | Inv Amt | Work Type | Work Role | Bill | Timesheet | Board | Entry Status | Ticket Status | Ticket # | Ticket Summary | Int Notes | Audit Done | Audit Notes | Notes | # issues | all issues | errors | warnings | notices |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 38817 | BMS | IC | fdrewett | 4/15 | 2:00 pm | 4:00 pm | 2.00 | 2.00 | 0 | 250.00 | Remote | Standard Technician | Billable | 4/13 | Projects | ReadyToBill | >Closed | 74350 | DCPROMO | 0 | DC promotion of INSIGHT-DC01 \(192.168.0.7\) as additional domain controller for Insight.local was hanging during initial replication pull from InsightPDC \(192.168.0.2\). Root cause was a broken secure channel \(Error 1749 — "The security context is invalid"\) combined with stale registry and database artifacts from the failed promotion attempt. Resolved by cleaning up the failed promotion state, unjoining/rejoining the domain with a fresh computer account, and re-running the DC promotion. Promotion completed successfully. Post-promotion verification passed — AD replication healthy across all partitions, DNS zones and SRV records confirmed, DC01 is ready for client DNS cutover. **Remaining:** * Transfer FSMO roles from InsightPDC to INSIGHT-DC01 * Update DHCP/static DNS to point clients to DC01 * Verify SYSVOL replication * Activate Windows license \(113 days remaining\) * Monitor replication 24–48 hrs, then demote/decommission InsightPDC | 2 | Notices: Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | Board: Board not 'Help Desk' or 'Help Desk 2.1', Notes: Notes longer than 500 characters | |||||
| 2 | 38988 | BMS | CT | fdrewett | 4/20 | 7:00 am | 8:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74499 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations | 0 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations Incident: https://bms.huntress.io/org/295830/infection\_reports/2093168 Summary: Huntress detected a successful suspicious authentication to M365 account charlotteb@couragenm.com on 2026-04-20 12:51:16 UTC from 47.253.180.189 \(Alibaba Cloud - US, Virginia\) using user agent axios/1.15.0 against the OfficeHome application. Device was non-compliant/unmanaged. Axios UA is associated with Phishing-as-a-Service kits and automated credential validation / session hijacking. Huntress auto-revoked sessions and disabled the identity. IOCs: - User: charlotteb@couragenm.com - Src IP: 47.253.180.189 \(Alibaba Cloud - US\) - User Agent: axios/1.15.0 - Session ID: 00401e2a-2a11-ede3-62cf-26b1d4d97c1e - App: OfficeHome \(4765445b-32c6-49b0-83e6-1d93765276ca\) - Device: Non-compliant, Unmanaged Remediation actions completed: 1\. Contained account in M365 admin center — reset password to a new strong value, blocked sign-in, and initiated sign-out to revoke all refresh tokens\. 2\. Verified per-user MFA status: Enforced\. 3\. Audited registered MFA / authentication methods in Entra for charlotteb — no unfamiliar phone numbers, Authenticator registrations, or alternate emails\. No attacker-registered methods present\. 4\. Reviewed Entra sign-in logs for the user — no additional suspicious successful sign-ins identified beyond the Huntress-flagged event; no 'Previously satisfied' MFA from foreign IPs observed\. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 3 | 39336 | BMS | HH | fdrewett | 4/24 | 8:15 am | 2:00 pm | 5.75 | 5.75 | 0 | 862.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | BitTitan MigrationWiz environment build-out for the Google Workspace to Microsoft 365 migration. Configured the Google Workspace source endpoint: created the GCP project, created the service account and JSON key, enabled the Gmail, Drive, Calendar, Contacts and Admin SDK APIs, and granted domain-wide delegation for the BitTitan OAuth scopes. Configured the Microsoft 365 destination endpoint: registered the MigrationWiz application in Entra ID, granted modern authentication consent, and provisioned the dedicated migration admin account. Extended troubleshooting of the Microsoft consent and authentication flow before Verify Credentials would pass against both endpoints. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 4 | 39650 | BMS | HH | fdrewett | 4/27 | 1:00 pm | 5:00 pm | 4.00 | 4.00 | 0 | 600.00 | Remote | Standard Technician | Billable | 4/27 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | Built out the migration source data set. Updated the user tracking sheet against the current Google Admin export, then reviewed the full account list line by line with Jesse Hugg to confirm who migrates, who is archived, and how aliases and shared mailboxes are handled. Cleaned up and imported the finalized user list into MSPComplete via CSV and applied User Migration Bundle licensing. Created the Document migration project for My Drive to OneDrive and pre-provisioned each user's OneDrive so the Drive data had a destination to land in. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters |
Legend:
(hover over fields for details)
Tickets with over 5 hours in the current view (1)
| Hours | Ticket # | Company | Ticket Summary |
|---|---|---|---|
| 23.50 | 71559 | HH | Migration to M365 Time Tracking |
Notices
| Field | Message | Count |
|---|---|---|
| Board | Board not 'Help Desk' or 'Help Desk 2.1' | 1 |
| Notes | Notes longer than 500 characters | 4 |
| Total | 5 | |