Week 18 · lesson

Lesson 1: Intake, Inventory, and Baseline

The fastest way to create a bad support plan is to start changing things before you understand the client.

Harborview Community Learning Lab has hardware, accounts, cloud services, printers, Wi-Fi, data, and users who expect all of it to work together.

Before you touch configuration, build the baseline.

Intake answers what the client actually needs

The client brief is not background decoration.

It defines success.

Harborview needs:

  • six usable desktop stations;
  • one staff laptop;
  • one managed mobile device;
  • shared print/scan capability;
  • wired desktop networking;
  • staff/mobile Wi-Fi;
  • browser-based productivity and video meetings;
  • standard-user daily accounts;
  • controlled administrator access;
  • MFA for staff/cloud identity;
  • endpoint protection and firewall controls;
  • backup/recovery;
  • privacy-safe records;
  • supportable changes.

Every later decision should point back to one of those requirements.

If it does not, ask why the technology is there.

Harborview service challenge from intake and baseline through target state, diagnosis, security and recovery verification, and handoff.
Harborview service challenge from intake and baseline through target state, diagnosis, security and recovery verification, and handoff.

Diagrams open at a readable shape-aware scale. Zoom or expand when you need more detail.

Harborview · baseline

Preserve the supplied state before design begins

The same client environment will remain visible throughout the service challenge.
  1. 01
    Inventory

    Desktop, managed mobile, switch/AP, router/firewall, MFD, practice VM, and cloud services.

  2. 02
    Known state

    Record addressing, identity, services, controls, and recovery evidence before changes.

Inventory is more than counting devices

An inventory should tell another technician what exists and what matters about it.

For each asset, record information such as:

asset ID
asset type
model / platform
assigned role
operating system
important hardware
network method
security/management state
serviceability notes
warranty / lifecycle clue
required client function

A useful inventory does not say:

Desktop 1.

It says something closer to:

HCL-WS01, student desktop, Windows 11 Pro, wired Ethernet, 16 GB RAM, NVMe system drive, standard-user station, endpoint protection enabled, used for browser productivity and video meetings.

The second record tells you why the asset exists.

3D service environment

Inside the rack: separate data from power

Robotnix-original procedural rack. Use the views and traces to isolate the support boundary before naming a failed device.

Building the rack model…

Dependency trace

Which path are you proving?

Start broad, then isolate either the data path or the power path.

Read the rack as text

Data path: router/firewall → patching/switching → server/service.

Power path: UPS → PDU → router, switch, and server.

  • Patch panel: The patch panel is passive structured cabling. It organizes permanent cable runs but does not route, switch, or assign addresses.
  • Managed switch: The switch provides local Ethernet connectivity and may supply PoE. Port state, VLANs, link negotiation, and cabling all matter.
  • Router / firewall: The router/firewall is the routed boundary between networks and commonly owns default-gateway, NAT, filtering, and WAN handoff responsibilities.
  • Server: The server hosts a workload or service. A healthy network path does not prove the application, OS, storage, or service process is healthy.
  • UPS: The UPS provides bounded battery-backed power and graceful-shutdown time. It is not unlimited runtime and should be monitored as part of recovery planning.
  • PDU: The power distribution unit delivers rack power to devices. Front-panel network evidence can look normal until the power path is traced separately.

Compatibility belongs in the baseline

Before support begins, verify that the system design is internally plausible.

Examples:

Workstations

Check:

  • CPU/platform support;
  • RAM generation/capacity;
  • storage interface;
  • graphics/display requirements;
  • network capability;
  • Windows edition/version requirements;
  • camera/microphone availability for video meetings.

Staff laptop

Check:

  • battery/service condition;
  • Wi-Fi capability;
  • docking or peripheral requirements;
  • encryption support;
  • managed account/security state.

Printer/MFP

Check:

  • Ethernet/Wi-Fi/USB role;
  • driver/support path;
  • scan destinations;
  • ADF/flatbed requirement;
  • secured-print/privacy requirement if used.

Managed mobile device

Check:

  • OS support state;
  • Wi-Fi/cellular capability;
  • MDM/profile state;
  • encryption;
  • screen-lock policy;
  • synchronization requirement.

Compatibility is still a chain.

Week 2 never stopped being relevant.

Harborview persistent environment

Harborview service environment: isolate the failing boundary

Use the Week 18 client environment as one connected service system. Trace the affected path before changing hardware, networking, operating-system, security, or service state.

1. predict2. run3. inspect4. compare

What do you expect to keep working, and where do you think the path will stop?

Read the topology as text
  • Client desktop: wired learner workstation
  • Managed mobile: Wi-Fi + MDM + cloud identity
  • Switch: wired local path
  • Access point: wireless local path
  • Router / firewall: gateway and policy
  • MFD printer: print + scan service
  • Practice VM: bounded support workload
  • Cloud productivity: identity, mail, storage
  1. Client desktopSwitch: Ethernet
  2. Managed mobileAccess point: Wi-Fi
  3. SwitchRouter / firewall: LAN / gateway
  4. Access pointRouter / firewall: wireless LAN
  5. SwitchMFD printer: print/scan path
  6. SwitchPractice VM: support network
  7. Router / firewallCloud productivity: remote service

Build the network dependency map before troubleshooting it

Harborview's network can be represented like this:

internet/provider

SOHO router/firewall

local switch / LAN
   ├── desktop workstations
   ├── printer/MFP
   └── wireless AP
          ├── staff laptop
          └── managed mobile device

Above the IP path sit services:

DHCP
DNS
cloud identity
cloud productivity/email/storage
printing/scanning
video meeting service

A user may experience one application failure even while everything below it works.

The map gives you somewhere to place that failure later.

Cloud service is still part of the client system

Harborview uses cloud productivity, email, and storage.

That adds dependencies:

Trace those dependencies on the persistent Harborview topology above; the environment is the same even when the active service path changes.

Do not write cloud: working as one baseline checkbox.

Separate the layers.

A user may sign in successfully while lacking the correct license.

Cloud storage may be available while one folder is excluded from synchronization.

Video meetings may work while microphone permission is denied locally.

The cloud did not make troubleshooting disappear.

It moved some boundaries.

The practice VM has a specific purpose

The local practice VM exists for software/testing support.

That means you need to know:

  • host resources;
  • guest OS;
  • virtual disk location;
  • virtual NIC state;
  • network mode;
  • snapshot/backup role;
  • whether external access is required.

Do not change the VM to bridged/external networking just because external internet sounds more useful.

The network mode should match the practice requirement.

A host-only VM can be healthy and intentionally isolated.

Safety boundaries are part of intake

Before any service work, identify stop conditions.

Examples:

  • swollen battery;
  • burning smell;
  • liquid exposure;
  • damaged power connection;
  • visibly damaged electrical component;
  • printer fuser or hot internal mechanism;
  • unsupported physical service procedure.

A capstone should not reward unsafe curiosity.

If the evidence already says stop, more testing is not better testing.

Privacy boundaries are part of intake too

Harborview uses fictional accounts and records, but the support model should still respect real privacy principles.

Do not include in support notes:

  • passwords;
  • MFA codes;
  • unnecessary personal content;
  • private message contents;
  • full confidential documents;
  • unrelated screenshots.

Record the evidence needed to support the ticket.

Not everything the technician can see belongs in the record.

Authorization defines what you may change

For each system, identify who owns the configuration.

Examples:

  • Windows local setting may be controlled by central policy;
  • mobile setting may be controlled by MDM;
  • cloud account access may be controlled by identity administration;
  • router/firewall settings may require network-owner approval;
  • remote-support access requires an authorized ticket/session.

The question is not merely:

Can I change this?

It is:

Am I the correct person to change this under the client process?

Baseline evidence should be observable

A baseline is not:

Everything looks good.

A stronger baseline uses inspectable evidence.

Workstation baseline

Possible evidence:

POST: normal
Windows boot: normal
RAM/storage detected as expected
Device Manager: no supplied critical warning
wired link: up
valid IP/gateway/DNS
cloud sign-in: works
browser productivity: works
video-meeting camera/mic test: works

Printer baseline

printer network: reachable
internal test page: correct
shared queue: available
print test: correct
scan test: reaches approved fictional destination

Staff laptop baseline

battery: no swelling/damage
Windows: supported
Wi-Fi: associated
valid IP configuration
MFA sign-in: normal
BitLocker/encryption: required state present
endpoint protection/firewall: healthy

Mobile baseline

screen lock: compliant
MDM: enrolled
Wi-Fi: working
encryption: enabled
sync: expected services working
updates: required state current

VM baseline

host resources: normal
VM boots
virtual NIC: connected
network mode: documented
required allowed destinations: work
required isolated destinations: remain isolated

Baseline does not mean “prove every feature in the universe”

Test the requirements Harborview actually depends on.

If the lab does not use optical media, you do not need a 20-minute optical-drive certification ritual.

If the printer is not configured for fax, do not invent a fax requirement.

Scope keeps the baseline useful.

Worked intake problem: printer is reachable but scanning requirement is unknown

Suppose:

printer prints normally
MFP network: reachable
ADF: present
client brief: requires shared scanning
scan destination: not documented

Is the baseline complete?

No.

The hardware exists, but the required scan path is still unproven.

The missing information becomes a requirement/configuration question for Lesson 2.

Do not call it a failure yet.

You simply do not have enough evidence.

Worked intake problem: six workstations, one different RAM configuration

Inventory shows:

WS01-WS05: 16 GB supported configuration
WS06: 8 GB + unmatched additional module
system currently boots

Does booting prove the configuration is ideal or fully supported?

No.

Record the variance and verify the board/platform memory requirements before changing anything.

The baseline captures abnormal state even when it has not yet caused a visible incident.

System process animation

Harborview service lifecycle

Use one persistent environment from intake through diagnosis, recovery proof, and handoff.

Technician question: Which transition needs both security and recovery evidence?

Build the Harborview baseline packet

Create:

Asset inventory

asset ID:
role:
platform:
important hardware:
network path:
security/management state:
required client function:
serviceability/compatibility note:

Requirement matrix

client requirement:
assets/services involved:
current evidence:
proven / unproven / not applicable:
remaining question:

Dependency map

Include:

  • endpoints;
  • printer;
  • mobile;
  • router/firewall;
  • access point;
  • DNS/DHCP;
  • cloud identity/service;
  • VM;
  • backup/recovery.

Boundary record

safety stop conditions:
privacy restrictions:
authorization boundaries:
managed-policy owners:
external/provider dependencies:

Before you move on

The baseline does three things:

  1. tells you what Harborview needs;
  2. tells you what the environment currently proves;
  3. tells you what you are not authorized to assume.

That becomes your reference point for every configuration and every incident that follows.

Next, you turn the requirements into a supportable target state.

Read it. Prove it.

Lesson knowledge checks

Answer from the lesson you just completed. Results stay in this browser and are not submitted.
Knowledge check 1

What belongs in a client intake baseline before configuration begins?

Knowledge check 2

Why is an asset inventory part of a service challenge?