Environment Reference — Club Support Inc. (MSP for Golf/Country Clubs)
Single source of truth for the tech stack. Future scripts/docs target this.
Distilled from the imported procedure set (see _imported/).
⚠️ This folder's imported archives contain sensitive reference files
(O365 Backdoor.xlsx, MFA Exclusion List.xlsx, 365 Global Admin and AD
Audit.xlsx). These were imported but their contents were not opened into
notes. Recommendation in procedures-review.md: move to a proper vault
(Entra PIM / IT Glue / Hudu) — not a shared OneDrive.
Identity & cloud
| Area |
Tool / Detail |
| On-prem directory |
Active Directory (one domain per club/location) |
| Cloud identity |
Microsoft Entra ID (Azure AD), hybrid via AD Connect → Delta Sync |
| Licensing |
Microsoft 365: Exchange Online (monthly or yearly commit), Business Standard, Office 365 E1 (web/mobile) / E3 (full desktop) |
| Security |
Conditional Access with GeoPolicy (geo-block); travel exclusions via Entra PIM time-boxed assignment to GeoPolicy-Exclusions group; MFA (Microsoft Authenticator); SSPR |
Ticketing & remote support
| Area |
Tool / Detail |
| PSA/RMM + ticketing |
Atera (agent installed via AteraAgent service) |
| Remote control |
TeamViewer Host (from clubsupport.ca → Support; no TeamViewer account) |
Club management software (line-of-business)
| App |
Notes |
Jonas Club (GJCwin) |
Terminal-ID based; install from Jonas (J:)\GJCwin\tools\setup.exe; needs "Mapped Drive Connector" if it errors |
JAM (Jonas.NET) |
SQL backend: [server]\SQLexpress, DB JonasNET, creds Jonas01 / Jonas01 (varies per club — check BC Clients folder) |
| NorthStar, Birchstreet |
App access requested on onboarding form |
Networking
| Vendor |
Where |
| Unifi Identity Enterprise |
VPN w/ MFA; user must be in AD group VPN Unifi; app name = club identity (e.g. ontarioracquetclub.ui.com); login via "Sign in with Microsoft" |
| FortiGate SSL VPN |
Some clubs via Entra group SG - FortiGate SSO SSLVPN |
| Cisco Meraki |
Client VPN (e.g. Glencoe) |
Phones, access control, AV, PDF
| Area |
Tool |
| Phones |
3CX (extensions, DIDs, call queues/ring groups, voicemail, softphone). Desktop client = ZAC |
| Access control / cameras |
Aurora Keyscan (dormakaba); DB host varies per club (see install guide) |
| Antivirus / EDR |
Sentinel One (current standard; Trend Micro retired) — every client must have the S1 agent installed |
| PDF |
Tungsten Power PDF Business (network install guide present; per-user install doc was corrupt) |
Computer naming convention
- Club-purchased laptop:
<first-initial><lastname><winver> e.g. JDoe10P
- Club Support–purchased:
<CLUB>-<initial><3-letters-lname>-<MMYY> e.g. ALB-GZen-0721
- POS:
<CLUB>-POS<JonasID>-<MMYY> e.g. ALB-POSG1-0721
- Replace old computer name in AD (delete stale object, reuse scheme)
Known clubs (from procedure references)
Glencoe (Clubhouse + Golf), Ontario Racquet Club, Royal Canadian Yacht Club,
Vancouver Lawn & Tennis, Toronto Lawn & Tennis. Onboarding form prefixes seen:
BGC, CRV, MSG, SHA, STG, VGC, plus ALB, MDGC examples.
Local accounts & paths
- Service/admin account on every machine:
CSupport (domain + local variants)
- Jonas data folder:
C:\GJCWIN (granted Everyone: Full Control — Jonas requirement)
- Jonas terminal ID file:
C:\GJCWIN\DATA\JONAS → Fid0:
- JAM registry:
HKLM\SOFTWARE\WOW6432Node\JonasNET (Everyone: Full Control)