Home»Time Entries Audit loading ... generated 8/7/2026 at 2:28:13 pm took 0.44 seconds version: 5436fa4 helpers: v2
Territory: BMS Dates: 7/1/26 to 7/31/26 Company: all Ticket: all User: fdrewett [x] Type: Remote [x] Role: all Bill: all Timesheet: all 6/29 7/6 7/13 7/20 7/27 Board: all Entry Status: all Ticket Status: -Closed [x] Issue: all [reset] Progress: 75% (6 of 8)
| row | id | Terr | Company | User | Date | Day | Start | End | Actual | Billed | Deduct | Inv Amt | Work Type | Work Role | Bill | Timesheet | Board | Entry Status | Ticket Status | Ticket # | Ticket Summary | Int Notes | Audit Done | Audit Notes | Notes | # issues | all issues | errors | warnings | notices |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 42281 | BMS | SVC | fdrewett | 7/1 | 10:00 am | 10:30 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 6/29 | Help Desk 2.1 | ReadyToBill | -Closed | 79049 | Cruzita - Clean up shared accounts in outlook | 0 | Cruzita called in asking for assistance with cleaning up outlook | 0 | |||||||
| 2 | 42277 | BMS | AIAM | fdrewett | 7/1 | 3:00 pm | 4:30 pm | 1.50 | 1.50 | 0 | 187.50 | Remote | Standard Technician | Billable | 6/29 | Help Desk 2.1 | ReadyToBill | -Closed | 79048 | ACE - Utility Pole Down | 0 | 8/6 CS ASK FD - is this the onsite for 42278? if so, fix date/times | Onsite examined the pole with Pat. Took pictures of the qwest id number on the pole. Back at the office called 811 and they were able to connect me with the line service / emergency repair department at century Link and we scheduled a tech for Monday | 2 | Errors: Audit Done: Audit incomplete; Warnings: Work Type: Possible onsite/remote mismatch (work type vs notes) | Audit Done: Audit incomplete | Work Type: Possible onsite/remote mismatch (work type vs notes) | |||
| 3 | 42276 | BMS | OMNI | fdrewett | 7/2 | 9:00 am | 11:00 am | 2.00 | 2.00 | 0 | 250.00 | Remote | Standard Technician | Billable | 6/29 | Help Desk 2.1 | ReadyToBill | -Closed | 78828 | OMNI Weekly Meeting | 0 | weekly meeting and working with Jim on the High-Res Camera images | 0 | |||||||
| 4 | 42161 | BMS | IC | fdrewett | 7/3 | 9:30 am | 10:30 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 6/29 | Help Desk 2.1 | ReadyToBill | -Closed | 78900 | Fraud Email | 1 | 8/6 CS long notes ok | Security incident response - Microsoft 365 account \(Kole Spathelf\) On July 3, our monitoring partner detected that an outside party had signed into Kole Spathelf's Microsoft 365 account from an unauthorized location. The account did not have multi-factor authentication turned on, which allowed the sign-in using only the password. The account was automatically locked down within about 11 minutes of detection, cutting off the intruder's access. We then performed a full investigation and confirmed the intruder did not set up any hidden access, forwarding, or other means to get back in. During the brief access window, the intruder viewed roughly 110 emails, mostly routine company announcements and pay notifications. There was no evidence that any email was sent, moved, or deleted from the account. To secure the account, we reset the password and turned on multi-factor authentication, which will prompt Kole to set up a second verification step at next sign-in. The account has been safely returned to normal use. Recommended next step: we advise enabling multi-factor authentication across all user accounts in your Microsoft 365 environment to prevent this type of intrusion going forward. We're happy to schedule this with you. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | ||||
| 5 | 42162 | BMS | IC | fdrewett | 7/3 | 10:45 am | 11:45 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 6/29 | Help Desk 2.1 | ReadyToBill | -Closed | 78900 | Fraud Email | 1 | 8/6 CS long notes ok | Security incident response and account decommission, Microsoft 365 account \(Dijon White\) On July 3, our monitoring partner detected that an outside party had gained access to Dijon White's Microsoft 365 account from an unauthorized location, using a stolen sign-in session. This was the second such attempt against your organization that day from the same source. The account was automatically locked down within about 6 minutes of detection, cutting off the intruder's access. We then performed a full investigation and confirmed the intruder did not set up any hidden access, forwarding, or other means to get back in. Because this account belonged to an employee whose last day was July 2, and at your direction, we converted the mailbox to an archive-only mailbox \(retaining the email for your records\), blocked all sign-in to the account, and removed its paid license to free up the subscription seat. Recommended next step: we advise enabling multi-factor authentication across all user accounts and reviewing sign-in protections for your Microsoft 365 environment, as your organization was targeted twice in one day. We're happy to schedule this with you. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | ||||
| 6 | 42273 | BMS | SVC | fdrewett | 7/5 | Sun | 2:00 pm | 11:59 pm | 10.00 | 10.00 | 0 | 1250.00 | Remote | Standard Technician | Billable | 6/29 | Help Desk 2.1 | ReadyToBill | -Closed | 79047 | File Server Migration | Tue 7/7/2026 10:44 PM MDT - Time Entry has been split into multiple records due to spanning overnight from 7/5/2026 2:00:00 PM thru 7/6/2026 2:30:00 AM | 1 | 8/6 CS duplicate notes ok, internal notes ok, long notes ok | 2026-06-17 Discovery Assessment of legacy file server \(dsrv1\): inventoried shares, permissions, storage utilization, ~2.6M file baseline, mapped drives, and connected instruments/devices to scope migration plan 2.5 Pre-cutover Build & Prep Built new file server \(Server 2022\), joined domain, recreated share structure matching source, remediated NTFS permissions \(removed orphaned ACL entries, cleaned legacy profile artifacts\) 3.0 Pre-cutover Data Migration Performed baseline data copy of ~892GB / 2.6M files from legacy server to new server; validated copy integrity 2.5 2026-07-06 Cutover After-hours cutover: final delta sync and verification, decommissioned legacy server identity, migrated server name/IP to new hardware, re-registered DNS, validated share access and read/write from client workstation 3.5 2026-07-06 Cutover Support Troubleshooting during cutover \(AD object cleanup requiring recursive removal, IP reassignment conflict resolution\) 1.0 | 3 | Warnings: Notes: Duplicate notes; Notices: Int Notes: Internal notes, Notes: Notes longer than 500 characters | Notes: Duplicate notes | Int Notes: Internal notes, Notes: Notes longer than 500 characters | |
| 7 | 42274 | BMS | SVC | fdrewett | 7/6 | 12:00 am | 2:30 am | 2.50 | 2.50 | 0 | 312.50 | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 79047 | File Server Migration | Tue 7/7/2026 10:44 PM MDT - Time Entry has been split into multiple records due to spanning overnight from 7/5/2026 2:00:00 PM thru 7/6/2026 2:30:00 AM | 1 | 8/6 CS duplicate notes ok, internal notes ok, long notes ok | 2026-06-17 Discovery Assessment of legacy file server \(dsrv1\): inventoried shares, permissions, storage utilization, ~2.6M file baseline, mapped drives, and connected instruments/devices to scope migration plan 2.5 Pre-cutover Build & Prep Built new file server \(Server 2022\), joined domain, recreated share structure matching source, remediated NTFS permissions \(removed orphaned ACL entries, cleaned legacy profile artifacts\) 3.0 Pre-cutover Data Migration Performed baseline data copy of ~892GB / 2.6M files from legacy server to new server; validated copy integrity 2.5 2026-07-06 Cutover After-hours cutover: final delta sync and verification, decommissioned legacy server identity, migrated server name/IP to new hardware, re-registered DNS, validated share access and read/write from client workstation 3.5 2026-07-06 Cutover Support Troubleshooting during cutover \(AD object cleanup requiring recursive removal, IP reassignment conflict resolution\) 1.0 | 3 | Warnings: Notes: Duplicate notes; Notices: Int Notes: Internal notes, Notes: Notes longer than 500 characters | Notes: Duplicate notes | Int Notes: Internal notes, Notes: Notes longer than 500 characters | ||
| 8 | 42272 | BMS | OMNI | fdrewett | 7/6 | 8:00 am | 11:00 am | 3.00 | 3.00 | 0 | 375.00 | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 77009 | Encino Metals Time Tracking | 0 | Time tracking for working with Prewire on getting the Scope of work document and working with Lucero on her questions | 0 | |||||||
| 9 | 42271 | BMS | OMNI | fdrewett | 7/6 | 11:00 am | 12:00 pm | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 77009 | Encino Metals Time Tracking | 0 | Fernando picking up the equipment for El Paso | 0 | |||||||
| 10 | 42207 | BMS | PPT | fdrewett | 7/6 | 12:00 pm | 12:00 pm | 0.00 | 0.00 | 0 | - | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 78982 | Fwd: Paradigm Physical Therapy & Wellness - Los Lunas · Los Lunas, NM | 0 | Spoke to Celeste and we are thinking this is a spam message. | 0 | |||||||
| 11 | 42222 | BMS | AIAM | fdrewett | 7/7 | 9:00 am | 9:30 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 79008 | AMR - Tim Infection on laptop | 0 | We remoted into Tim's laptop and took a look. Kicked off a scan with Windows Defender. Scans came back clean. Did find a copy of Splashtop. Uninstalled it. Everything looks good. | 0 | |||||||
| 12 | 42227 | BMS | AIAM | fdrewett | 7/7 | 9:30 am | 10:00 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 79011 | Remote Printing | 0 | We buttoned in with Rebecca and enabled remote printing. Tested and working. | 0 | |||||||
| 13 | 42313 | BMS | OMNI | fdrewett | 7/8 | 8:00 am | 9:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 77010 | OMNI Pen Testing | 0 | Security Review with Jacob Adams | 0 | |||||||
| 14 | 42314 | BMS | OMNI | fdrewett | 7/8 | 9:00 am | 10:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 78828 | OMNI Weekly Meeting | 0 | review and planning for the higher resolution cameras with Jim | 0 | |||||||
| 15 | 42414 | BMS | OMNI | fdrewett | 7/9 | 9:30 am | 11:00 am | 1.50 | 1.50 | 0 | 187.50 | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 79083 | Weekly Meeting | 0 | Weekly Meeting | 0 | |||||||
| 16 | 42503 | BMS | OMNI | fdrewett | 7/11 | Sat | 12:00 pm | 5:00 pm | 5.00 | 5.00 | 0 | 625.00 | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 79174 | Main Migration | 1 | 8/6 CS long notes ok | build the new bridge and updated the routing for the zerotier networks. this is a big one we are retiring a complete network and switching all the workstations at main. 30+ Update on the Acme Main migration: I've got it automated end to end. One script moves each machine off the old ZT network onto the new one, updates all browser bookmarks to the new server \(Firefox, Chrome, Edge — across every user profile\), and fixes the Firefox homepage. A second script remaps the S: drive to the new server. Tested and working | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||
| 17 | 42508 | BMS | OMNI | fdrewett | 7/12 | Sun | 12:30 pm | 1:00 pm | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 7/6 | Help Desk 2.1 | PendingApproval | -Closed | 79174 | Main Migration | 0 | 1 | Errors: Notes: Missing notes, work type not travel | Notes: Missing notes, work type not travel | |||||
| 18 | 42573 | BMS | OMNI | fdrewett | 7/13 | 7:00 am | 9:00 am | 2.00 | 2.00 | 0 | 250.00 | Remote | Standard Technician | Billable | 7/13 | Help Desk 2.1 | PendingApproval | -Closed | 79174 | Main Migration | 0 | Migration fall out for main | 0 | |||||||
| 19 | 42618 | BMS | AIAM | fdrewett | 7/14 | 3:37 pm | 4:07 pm | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 7/13 | Help Desk 2.1 | PendingApproval | -Closed | 79264 | infection on laptop | 1 | 8/6 CS deduct missing not an issue here | Remoted in to Mike's laptop and found that some websites were sending notifications. Disabled notifications and kicked off a scan with Huntress. | 0 | ||||||
| 20 | 42837 | BMS | SVC | fdrewett | 7/16 | 8:00 am | 8:30 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 7/13 | Help Desk 2.1 | PendingApproval | -Closed | 79343 | Crystal support needs access to the server. | 0 | Got the Crystal support people remoted into the server | 0 | |||||||
| 21 | 43014 | BMS | AIAM | fdrewett | 7/22 | 11:00 am | 12:00 pm | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 7/20 | Help Desk 2.1 | PendingApproval | -Closed | 79673 | AMR - roll off AI meeting | 0 | Worked with Jack and Russ on updating the DNS records for the new AI project at AMR for acmeironandmetal.com | 0 | |||||||
| 22 | 43111 | BMS | AIAM | fdrewett | 7/23 | 10:00 am | 12:00 pm | 2.00 | 2.00 | 0 | 250.00 | Remote | Standard Technician | Billable | 7/20 | Help Desk 2.1 | PendingApproval | -Closed | 79673 | AMR - roll off AI meeting | 0 | weekly meeting and security audit review | 0 | |||||||
| 23 | 43026 | BMS | AIAM | fdrewett | 7/24 | 4:00 pm | 4:30 pm | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 7/20 | Help Desk 2.1 | PendingApproval | -Closed | 79670 | Emily needs access to omni | 0 | Remoted in and restarted the service for Zerotier. Ran script update from the old Zerotier network to the new one for main. Tested and working. | 0 |
Legend:
(hover over fields for details)
Tickets with over 5 hours in the current view (2)
| Hours | Ticket # | Company | Ticket Summary |
|---|---|---|---|
| 12.50 | 79047 | SVC | File Server Migration |
| 7.50 | 79174 | OMNI | Main Migration |
Errors
| Field | Message | Count |
|---|---|---|
| Audit Done | Audit incomplete | 1 |
| Notes | Missing notes, work type not travel | 1 |
| Total | 2 | |
Warnings
| Field | Message | Count |
|---|---|---|
| Notes | Duplicate notes | 2 |
| Work Type | Possible onsite/remote mismatch (work type vs notes) | 1 |
| Total | 3 | |
Notices
| Field | Message | Count |
|---|---|---|
| Int Notes | Internal notes | 2 |
| Notes | Notes longer than 500 characters | 5 |
| Total | 7 | |