Skip to content

KB-MAP — Club Support IT Knowledge Map

One-file context-cramming overview. Dense facts + topic-to-doc routing so an agent knows where to look, not the full text. For details, use the MCP tools (search_docs / get_doc) or open the linked doc. Full doc index: llms.txt. Paths below are relative to the docs root (documents/) — pass them directly to MCP get_doc(); from the repo root, prefix with documents/.

Stack at a glance (most-needed facts)

  • Tickets / RMM: Atera (agent service AteraAgent). Remote control: TeamViewer Host (from clubsupport.ca; no TV account).
  • Service/admin account on every machine: CSupport (domain + local).
  • Identity: on-prem Active Directory → Microsoft Entra ID via AD Connect (run Delta Sync after AD changes). Hybrid.
  • M365 licenses: Exchange Online / Business Standard (monthly or yearly commit); E1 = web/mobile only, E3 = full desktop suite.
  • Security: Conditional Access + GeoPolicy (geo-block); travel = time-boxed Entra PIM → GeoPolicy-Exclusions. MFA = Microsoft Authenticator.
  • Phones: 3CX (extensions / DIDs / queues / voicemail). Desktop client = ZAC.
  • Networking: Unifi Identity VPN w/ MFA (AD group VPN Unifi); FortiGate SSL VPN (Entra group SG - FortiGate SSO SSLVPN); Cisco Meraki client VPN (Glencoe).
  • Line-of-business: Jonas Club (GJCwin), JAM (Jonas.NET); also NorthStar, Birchstreet.
  • AV / EDR: Sentinel One (Trend Micro retired); every client has the S1 agent.
  • Access control / cameras: Aurora Keyscan (per-club DB host).
  • PDF: Tungsten Power PDF Business.

Instant facts (answer without a lookup)

  • Offboarding FIRST action: kick all sessions + reset password + block sign-in. Then disable AD/Azure AD, revoke VPN, remove admin/RDP.
  • GAL hide: AD attribute msExchHideFromAddressLists=TRUE (+ set mailNickname if missing) → Delta Sync → verify in Exchange.
  • Computer naming: club laptop Initial+Last+WinVer (JDoe10P); Club Support-bought CLUB-I+LLL-MMYY (ALB-GZen-0721); POS CLUB-POS<JonasID>-MMYY. On rebuild, delete the stale AD object.
  • Jonas: install Jonas (J:)\GJCwin\tools\setup.exe; terminal ID file C:\GJCWIN\DATA\JONAS (Fid0:); grant Everyone:Full on C:\GJCWIN + reg key HKLM\SOFTWARE\WOW6432Node\JonasNET. JAM SQL: [server]\SQLexpress, DB JonasNET, Jonas01/Jonas01 (varies by club).
  • Jonas time-clock devices (Greens): at some deployments (e.g., Credit Valley / AD), Greens-department time-clock terminals may include GT in the device name — GT = Greens Time.
  • OneDrive: auto-deleted 30 days after license removal → archive before removing the license.
  • _imported/ = raw OneDrive export (credentials + PII: O365 Backdoor.xlsx, MFA Exclusion List.xlsx, completed offboarding forms). Gitignored + hard-excluded from MkDocs/MCP. Never commit or serve.

Topic → where to look

Topic Doc(s)
New user setup procedures/onboarding/ (glencoe-staff-onboarding, new-user-request)
Workstation build (domain join, Jonas, hardening, NIC offloads, power) procedures/computer-setup/new-computer-setup.md
Offboarding — full 10-section checklist procedures/offboarding/user-offboarding-checklist.md
Termination request (client form) procedures/offboarding/account-termination.md
Hide user from GAL procedures/offboarding/remove-user-from-gal.md
Install Jonas / JAM procedures/software/jonas-and-jam-install.md
3CX ZAC phone client install/update procedures/software/zac-phone-client.md
Epson POS / chit printer + Jonas styles procedures/software/epson-pos-printer.md
Aurora Keyscan (access control) procedures/software/aurora-keyscan.md
Tungsten PDF procedures/software/tungsten-pdf.md
Unifi VPN + MFA / FortiGate VPN procedures/networking/
GeoPolicy travel exclusion (PIM) procedures/security/geopolicy-travel-exclusion.md
ISP support numbers procedures/reference/isp-support-numbers.md
Cert roadmaps procedures/reference/career-and-certification-roadmaps.md
Full tech-stack reference environment.md
Procedures audit (gaps / risks / automation map) procedures-review.md
Automation scripts ../scripts/ (Invoke-Offboarding, Invoke-NewComputerBuild, Hide-ADUserFromGAL)

How to get details on demand

  • MCP server (../mcp-server/): list_docs() → search_docs(query) → get_doc(path). Path is relative to documents/ (e.g. procedures/offboarding/user-offboarding-checklist.md). Stdio or MCP_TRANSPORT=http.
  • Doc index: llms.txt (path + one-line description for every doc).
  • Web front-ends (humans): mkdocs serve or npx docsify-cli serve documents.
  • CLI: grep -ri "<topic>" . (from the docs root)

Known gaps / TODOs (from procedures-review.md)

  • Tungsten PDF per-user install doc was corrupt — needs re-export.
  • Credential sprawl: O365 Backdoor.xlsx + MFA Exclusion List.xlsx should move to a vault (Entra PIM / IT Glue / Hudu).
  • Duplicate SOPs (New Computer Setup ×2, standalone Jonas copy) — consolidate.
  • Cert roadmap lists retired exams MD-100 / MD-101 → current single exam is MD-102.