#34634 Alphagraphics migration/offboarding

Brandon,

Walt let me know that AGMSO would be migrating away from Artichoke Consulting and would like to be offboarded by the end of June. That's a safe and sane goal, but you and I should have a meeting to talk about your requirements and a scope of work for the transition/offboarding.

Think we could have teams meeting sometime next week?

https://artichoke.consulting/schedule/peet

Thanks!
Peet

Peet,

I was able to get into Mosyle just fine.

However I was unable to login to the Apple Business Manager. Could you provide me with the necessary credentials?

Thank you

On Thu, 29 May 2025 at 18:15, Artichoke Support - Peet <[email protected]> wrote:

Brandon,

I'l look into the Apple Business Manager tomorrow.

Attached is an estimate to replace Jennifer's computer and migrate Bulk Mailer Business.

Cheers.Peet

Brandon,

Just wondering if you were able to discuss this Walt and if you'd like to move forward with a new computer/BM migration. I'd like to make sure to get this rolling as soon as possible so there's no issues being finished by 7/1.

Cheers.Peet

Peet,

I just finished discussing this with Walt. It turns out he provided Kip with a new workstation for the EFI machine, but it wasn’t actually needed. As a result, we now have an extra new workstation available. It’s currently sitting in the corner next to Kip. I’ve reached out to him to confirm the exact specs, but in the meantime, we can plan on using it. According to Walt, the workstation should be more than capable of running BM.

On Tue, 3 Jun 2025 at 13:45, Artichoke Support - Peet <[email protected]> wrote:

Kip got back to me, this is the specs

[embedded image]

On Tue, 3 Jun 2025 at 13:56, Brandon Ditty <[email protected]> wrote:

Peet,

I just finished discussing this with Walt. It turns out he provided Kip with a new workstation for the EFI machine, but it wasn’t actually needed. As a result, we now have an extra new workstation available. It’s currently sitting in the corner next to Kip. I’ve reached out to him to confirm the exact specs, but in the meantime, we can plan on using it. According to Walt, the workstation should be more than capable of running BM.

On Tue, 3 Jun 2025 at 13:45, Artichoke Support - Peet <[email protected]> wrote:

Brandon,

If the computer has at least 512GB of solid state storage, it should be fine. I'll reach out to Kip and double check. If it's good, would you like to move forward with the BM migration as proposed?

Cheers.

Brandon,

I assume you have Syncro on the device. If so, could you push my RMM to it? The attached powershell script deploys without issue via Syncro. It's attached as a text file to make copying and pasting easier.

Thanks.Peet

Sounds good. It’s currently offline, but I’ve messaged Kip to bring it online. Once it’s up, I’ll run the script.

On Wed, 4 Jun 2025 at 08:44, Artichoke Support - Peet <[email protected]> wrote:

The script has been executed.

On Wed, 4 Jun 2025 at 09:14, Brandon Ditty <[email protected]> wrote:

Sounds good. It’s currently offline, but I’ve messaged Kip to bring it online. Once it’s up, I’ll run the script.

On Wed, 4 Jun 2025 at 08:44, Artichoke Support - Peet <[email protected]> wrote:

Peet,

I am just checking in and making sure you are all good? Do you need anything from me?

On Wed, 4 Jun 2025 at 13:20, Brandon Ditty <[email protected]> wrote:

The script has been executed.

On Wed, 4 Jun 2025 at 09:14, Brandon Ditty <[email protected]> wrote:

Sounds good. It’s currently offline, but I’ve messaged Kip to bring it online. Once it’s up, I’ll run the script.

On Wed, 4 Jun 2025 at 08:44, Artichoke Support - Peet <[email protected]> wrote:

Brandon,

I think I'm set. Everything is going well with setting up BM on the computer, AG-Jen-BM should be in your Syncro. I'm not sure how your configured, but it does not look like any security software has been deployed by your RMM. I should have it wrapped up Friday and she'll be able to sign in and start working on it Monday.

I don't think anyone @ AGMSO was informed about any of the work but they're informed and onboard.

Cheers.Peet

Great to hear, As far as the rest of the migration goes is everything still going smoothly?

On Wed, 11 Jun 2025 at 15:16, Artichoke Support - Peet <[email protected]> wrote:

The migration for BM ended up being a bear. I'll have a full postmortem in my invoice notes for you, but suffice to say BM pretty much sucks, but it's done and Jen is migrated to the computer. I've installed and configured via GPO [MakeMeAdmin](https://github.com/pseymour/MakeMeAdmin) for her user to be enabled to automatically elevate to admin status for installing the updates. (as an FYI always use the [installers from the Master branch](https://github.com/pseymour/MakeMeAdmin/tree/master/Installers) "Installers" folder, not the [Release installers](https://github.com/pseymour/MakeMeAdmin/releases). The release installers have not been updated since 2019). If you have another way to manage local administrative access like AutoElevate , simply uninstall MakeMeAdmin.

I will begin removing any management I have installed this week. I pulled Huntress agents as of yesterday and will pull the AutoElevate client today/tomorrow as well as the SimpleHelp agent. I need to audit the settings in the MDM as well as GPO's to ensure there's no auto deployment of my tooling.

I'll draft up the Network Map and information about any software that can optionally continue in your deployment (Like MakeMeAdmin, XCreds, and 0patch). I should have that for you at the beginning of next week and be able to answer any questions you may have.

Cheers.Peet

Good Morning Peet,

Is there a status of the network map and list of software?

On Tue, 17 Jun 2025 at 14:26, Artichoke Support - Peet <[email protected]> wrote:

Checking back in on this, Is there a status of the network map and list of software?

On Wed, 25 Jun 2025 at 11:00, Brandon Ditty <[email protected]> wrote:

Good Morning Peet,

Is there a status of the network map and list of software?

On Tue, 17 Jun 2025 at 14:26, Artichoke Support - Peet <[email protected]> wrote:

Hey Brandon,
Sorry for the slow communication here. I had some domestic/house issues with a failed boiler side arm (hot water heater), causing a flood, clean up and warranty issues with the side arm manufacturer. Toss in some painful interactions with local plumbers and having to teach myself how to sweat pipe to replumb the new heater and well yeah, I've only had time for critical issues the last couple weeks.
On the plus side, everythings cleaned up and we finally have hotwater again as of 11PM yesterday.
All that said I'll have everything over to you end of week.
I've removed all my tooling/security/support software from all devices except the 3 Physical servers (HV01, HV02, and HV03), and AG-SysAdmin just in case I need network access to finish gathering info for you.
Some things to note: The array in AG-HV02 was degraded, I sourced a drive and used the shelf-spare and the RAID 6 array is currently fully redundant. AG-MikeDreilingM2 was missed when deploying SyncroMSP, but it's been deployed to your Syncro as of today.
TacticalRMM was the last tool I removed from the macs and PC's. You may want to ensure there's no TacticalRMM agents with this Powershell for Windows:

$exePath = "C:\Program Files\TacticalAgent\unins000.exe"

if (Test-Path $exePath) {
Write-Output "INFO: Uninstalling TacticalRMM agent"
$process = Start-Process $exePath -ArgumentList "/VERYSILENT" -Wait -PassThru
Write-Output "Uninstaller exited with code: $($process.ExitCode)"
} else {
Write-Output "INFO: TacticalRMM agent not found"
}

And this bash script for macOS:

#!/bin/bash
if [ -d /opt/tacticalmesh ] || [ -d /etc/tacticalagent ]; then
echo "INFO: Uninstalling TacticalRMM agent"
if [ -f /usr/local/mesh_services/meshagent/meshagent ]; then
/usr/local/mesh_services/meshagent/meshagent -fulluninstall
fi

if [ -f /opt/tacticalmesh/meshagent ]; then
/opt/tacticalmesh/meshagent -fulluninstall
fi

launchctl bootout system /Library/LaunchDaemons/tacticalagent.plist
rm -rf /usr/local/mesh_services
rm -rf /opt/tacticalmesh
rm -f /etc/tacticalagent
rm -rf /opt/tacticalagent
rm -f /Library/LaunchDaemons/tacticalagent.plist
else
echo "INFO: TacticalRMM agent not found"
fi
Sorry for the bad formatting above, but Syncro is a nightmare with codeblocks
Cheers.Peet

Wow that sounds like a very eventful time! Hope you can get that all sorted out! Thank you for the update.

On Tue, 1 Jul 2025 at 15:39, Artichoke Support - Peet <[email protected]> wrote:

Good morning, is there any update on the documentation and list of software?

On Tue, 1 Jul 2025 at 15:39, Artichoke Support - Peet <[email protected]> wrote:

Brandon,

Sorry to leave you hanging and I wish I had a perfect bundle of info for delivery right now. But I've been underwater for several weeks. First literally with the house and then a wave of issues to bail out. Just information and not an excuse. Regardless, attached are two drawio documents for the network and server maps.

I'll get you information about MakeMeAdmin, XCreds, and 0patch (hopefully) tomorrow. I feel like those are the three that you need to know about and of those only XCreds and 0patch have a cost. Other than that I think I may still have to bill you for the BulkMailer migration and I will pull my last Tactical RMM clients that are reporting.

If you can indulge me for just a bit longer I'll do my best to ensure there's no trace of Artichoke Consulting left at AGMSO or at least guarantee that I have zero remaining access!

Cheers.Peet

Thank you peet, I am sorry to hear that you have been having a rough couple of weeks. I appreciate you getting back with me. Thank you for the maps, those are extremely helpful. Let me know if I can assist you in any way.

On Wed, 23 Jul 2025 at 19:38, Artichoke Support - Peet <[email protected]> wrote:

Brandon,

Thank you for your concern, like, really, thank you. It's appreciated. I think I finally have everything in order.

The primary software packages that will be available to you until the end of my subscription periods are:

XCreds from TwoCanoes. [https://twocanoes.com/products/mac/xcreds/](https://twocanoes.com/products/mac/xcreds/.): These are the macOS computers that authenticate with XCreds: AG-EllenMittlestadtM2, AG-JessYandellM2, AG-MikeDreilingM2, AG-KenPriceM2, AG-ConferenceRoomM2, AG-ForrestRowell, AG-LorrainSimmonsM2, AG-ZachTeynor, AG-LeeNelsonM2, and AG-KenPrice (if it comes back online). The pricing for XCreds from TwoCanoes is $600/year Install on up to 200 Macs, $3 per additional Mac. You can compile the software from source if you'd like to avoid purchasing from TwoCanoes. As it stands, the license on your macs is good until 2025-12-06. Let me know if you'd like to do anything with it.

0patch from https://0patch.com/: The following servers are past Microsoft's support Window, but have agmso.com \AG-HV01, agmso.com\AG-HV02, agmso.com\AG-HVO3, agmso.com\AG-MSSQL, agmso.com\AG-MSSQL, and agmso.com\Alpha have the 0patch Enterprise agent installed. 0patch is licensed at are ~$42/computer/year if you'd like to continue receiving vulnerability patching from 0patch through me, or you can work directly with 0patch, or I can uninstall the client and not have any vulnerability patching on the end of support servers. Just let me know what works best for you.

I've made sure that your Mosyle account has been set to revert to a free 30 device account. I had to update the password for [email protected] on the mybusiness.mosyle.com account. Here's a link to the current password: https://share.1password.com/s#ukPOoRntW6rrdzriP0WZ-yYn40cLYo2uVc94b4kDhm0 (shared with [email protected]). Please let me know that you've received and tested the credential.
I would highly recommend getting the "primary owner" switched to an email that isn't tied with a previous employee. You can ask their support for help with that.

I've also made sure that your every management/security tool is removed across the board as well as my remote access to pfSense and Unifi, and the GDAP relationship for the AGMSO M365 tenant.

My final three steps are to uninstall TacticalRMM from AG-SysAdmin, delete the Alphagraphics Vault in my 1Password/Delete the Alphagraphics 1Password tenant and delete my Microsoft Authenticator entry for [email protected] (the global admin for Microsoft).

Before I wrap up those three items, can you confirm the following:

- you have access to https://admin.microsoft.com with [email protected] and are a global admin.
-  you have access to https://mybusiness.mosyle.com with [email protected] (https://share.1password.com/s#ukPOoRntW6rrdzriP0WZ-yYn40cLYo2uVc94b4kDhm0 (shared with [email protected]))
-  you have access to https://10.1.1.254 with gadmin
- you do not have any other questions or concerns that would require me to access AGMSO via AG-Sysadmin via unattended access.

Thanks a million for your patience. Let me know what you want to do about Xcreds and 0Patch, and other than that, I think we're ready to completely disconnect.

Cheers.Peet

Peet, thank you for the update, I will discuss with walt what he wants to do with the subscriptions since he is the decision maker on the money side. As for logging in I was unable to get into [https://admin.microsoft.com](https://admin.microsoft.com/) with [email protected] As I hit the two factor roadblock.

[embedded image]

I successfully logged into [https://mybusiness.mosyle.com](https://mybusiness.mosyle.com/) with [email protected]

I was unable to log into [https://10.1.1.254](https://10.1.1.254/) with gadmin. I tried all the passwords that I thought would work but no luck on that end.

On Tue, 29 Jul 2025 at 19:54, Artichoke Support - Peet <[email protected]> wrote:

Brandon,

When you copied the "[email protected]" record from 1Password, did you skip the TOTP? Here is a link to the 1password record with the TOTP: https://share.1password.com/s#wacth1fghLd8QvNzVwDOHUtst9GXOZAVi4kHXfk7Ins

So you're set on access to ...

-  you have access to [https://mybusiness.mosyle.com](https://mybusiness.mosyle.com/) with [email protected] (https://share.1password.com/s#ukPOoRntW6rrdzriP0WZ-yYn40cLYo2uVc94b4kDhm0 (shared with [email protected]))
-  you have access to [https://10.1.1.254](https://10.1.1.254/) with gadmin
Cheers.Peet

I am all set with [email protected]. I am still having issues logging into [https://10.1.1.254](https://10.1.1.254/). Do you mind sending me the credentials to it? I could be fat fingering it.

On Wed, 30 Jul 2025 at 12:29, Artichoke Support - Peet <[email protected]> wrote:

User/Pass:
https://share.1password.com/s#hdKigTn-6d17ZuAhvL2Df9eF5D87YxAHpu1GFoCX7bw

SSH private key:
https://share.1password.com/s#lvp-ULawqHH_pfBDMWpbMqSF_QTAGDCBZw5l7NRhDmo

Cheers.Peet

Perfect I am in! Thank you so much

On Wed, 30 Jul 2025 at 13:00, Artichoke Support - Peet <[email protected]> wrote:

Brandon,

Just double checking that you've got all the access you need/expect and I'll disable AGMSO\artichoke, pull the last agent, delete 1Password Data and I should be fully offboarded.

Cheers.Peet

Sorry, for the late reply I was on vacation. I believe we are mostly there.

Could you send me the login/password for

10.1.1.173 SQL Server?
10.1.1.104 Admin Tools
10.1.1.12 Printer RIP Server
10.1.1.14 Win2K Ink Volume Settings
10.1.1.13 Dongle Server
Switch Logins

Once I have access to those I believe we are all good to wrap this up. I just want to say thank you for everything. It really was a pleasure getting to know you and work with you. I wish you the best.

On Wed, 30 Jul 2025 at 16:09, Artichoke Support - Peet <[email protected]> wrote:

Edits made via Bulk Update Tool - see change log for this timestamp