1
IT Health Snapshot
The lodge runs year-round with a small off-season team (October through May) and about 25 staff living on site during fishing season (June through September). Equipment is moved off site each fall and returned to the main office each spring. This review lists everything found in our records. Device status will be confirmed during the on-site visit.
Environment Overview
Users
4–5
Off-season staff working remotely; about 25 staff on site during fishing season
Workstations
5
3 actively reporting, 2 not checking in; mixed brands and models
Network
2 sites
Uplevel at LodgeHouse and OfficeHouse: 2 gateways, 2 switches, 7 access points
M365 Licenses
4
Business Standard, renews April 11, 2027
Workstation Inventory
Includes every device on record. Devices marked "Not reporting" have not checked in to monitoring and will be confirmed on site.
| Device | Model | Purchased | Warranty | OS | Monitoring |
|---|---|---|---|---|---|
| FrontDesk9 (front desk) | MSI Cubi 5 mini PC | Not on record | Unknown | Windows 11 Pro | Reporting |
| Drifters-Acct (accounting) | Dell Inspiron 15-3535 | 12/19/2024 | Expired 03/2026 | Windows 11 Pro | Reporting |
| BobsAspire (laptop) | Acer Aspire A14-52MT | 10/27/2025 | Expires 10/27/2026 | Windows 11 Home | Reporting |
| KRDL-BOBR (laptop) | HP ENVY x360 15 2-in-1 | 01/26/2022 | Expired 01/2023 | Windows 11 Home | Not reporting |
| BOB (laptop) | Dell Inspiron 15-3535 | 06/03/2025 | Expired 09/2026 | Windows 11 Home | Not reporting |
Network & Other Devices
| Device | Details | Notes |
|---|---|---|
| LodgeHouse network | Uplevel UG-102-1 gateway, ULS-101 switch, 4 access points (UAP-101B and UAP-102) | Firmware 5.2.0, last restarted 08/27/2026 |
| OfficeHouse network | Uplevel UG-102-1 gateway, ULS-102B switch, 3 access points (UAP-101B and UAP-102) | Firmware 5.2.0, last restarted 08/27/2026 |
| Phones | Verizon VoIP | Phones connect over the lodge Wi-Fi |
| Printer | Epson ET-3850 | Confirmed in use |
| Other printers | Epson ET-3760, Brother MFC-L8600CDW | Drivers found on a workstation; confirm whether still in use |
| Point of sale | To be confirmed | Workstations are used for point of sale; system and setup to be confirmed on site |
Microsoft 365 Licenses
4 Microsoft 365 Business Standard licenses, renewing April 11, 2027.
| Account | License | MFA | |
|---|---|---|---|
| Bob | bob@drifterslodge.com | Microsoft 365 Business Standard | App notification |
| Drifter's Accounting | accounting@drifterslodge.com | Microsoft 365 Business Standard | Text message (SMS) |
| Drifter's Operations | operations@drifterslodge.com | Microsoft 365 Business Standard | Not enabled |
| Info | info@drifterslodge.com | Microsoft 365 Business Standard | App notification |
Health Indicators
| Area | Status | Details |
|---|---|---|
| Patch Management | Review | The 3 reporting workstations are current on Windows 11 25H2. Patch status for the 2 non-reporting devices is unknown. |
| Endpoint Protection | Partial | SentinelOne is active on the 3 reporting workstations. The new agreement covers SentinelOne on all managed workstations. |
| Microsoft 365 Backup | At Risk | No backup is in place for email, OneDrive, or SharePoint. Datto SaaS Protection is included with the new agreement. |
| Identity / MFA | At Risk | MFA is enabled on 3 of 4 licensed accounts. The Operations account does not have MFA enabled. |
| Network | Active | Uplevel gateways, switches, and access points are in place at both sites and will be monitored under the new agreement. |
| Device Standardization | Review | Workstations are a mix of consumer brands and models. 3 of 5 run Windows 11 Home, which limits central management and security controls. |
| Seasonal Equipment Move | Review | All IT equipment is unplugged and moved off site each fall, then reinstalled each spring. Without a checklist, this adds risk of damage, loss, or setup issues at the start of the season. |
2
Application Inventory
Key business applications in use at Kenai River Drifters Lodge, from the installed software inventory and our conversations with your team.
| Application | Purpose | Vendor / Platform | Notes |
|---|---|---|---|
| Adventure Office | Reservations and booking | Adventure Office | Current booking system. Migration to Flybook is planned. |
| Flybook | Reservations and booking (planned) | Flybook (Full Steam) | Replacement for Adventure Office; migration timing to be confirmed |
| FareHarbor | Online booking for day trips and rafting | FareHarbor | Linked from the lodge website |
| QuickBooks Pro 2024 | Accounting and bookkeeping | Intuit | Desktop edition, installed on 1 workstation |
| Microsoft 365 Apps for Business | Email and Office productivity (Outlook, Word, Excel) | Microsoft | Installed on 3 workstations |
| Dropbox | File storage and sharing | Dropbox | Installed on 2 workstations. Not covered by Microsoft 365 backup. |
| Zoom Workplace | Video meetings | Zoom | Installed on 1 workstation |
| Password Boss | Password management | Password Boss | Installed on 1 workstation |
| TeamViewer Host | Remote access | TeamViewer | Installed on 2 workstations |
| Adobe Acrobat Reader | PDF viewing | Adobe | Installed on 1 workstation |
| Point of sale | Guest and retail payments | To be confirmed | Confirm on site whether this runs through Adventure Office or a separate system |
3
Security Posture
Security Stack
| Control | Current | With Vicinity Agreement | Status |
|---|---|---|---|
| Endpoint Detection & Response | SentinelOne on 3 reporting workstations | SentinelOne on all managed workstations | Partial |
| Email Security | Mailprotector Cloud Filter | Vade for Microsoft 365 | Active |
| Multi-Factor Authentication | 3 of 4 licensed accounts (app or SMS); none on Operations | Enabled on all accounts (see initiatives) | Incomplete |
| Microsoft 365 Backup | None | Datto SaaS Protection | Not in place |
| DNS Filtering | DNS Filter | Continues | Confirm |
| Firewall / Network Security | Uplevel UG-102-1 gateways at both sites | Continues, with Network Device Monitoring | Active |
| Patch Management | RMM on 3 reporting workstations | All managed workstations | Review |
| Print Management | None | PrintX | Not in place |
| Microsoft Secure Score | Microsoft 365 Defender | Improvement plan (see initiatives) | 22.85 / 100 |
Key Findings
- Microsoft Secure Score is 22.85 out of 100 (61 of 267 points), compared with an average of 46.8 for organizations of a similar size. There are 49 recommended actions open, and the Data category scores 0%.
- MFA is set up on the Bob and Info accounts (app notification) and the Accounting account (text message). The Operations account does not have MFA enabled.
- There is no backup of Microsoft 365 email, OneDrive, or SharePoint data. Datto SaaS Protection will cover all licensed accounts under the new agreement.
- 3 of 5 workstations run Windows 11 Home, and 2 workstations have not checked in to monitoring. During the off-season, some staff also use personal computers to access company email and systems.
- Several of the top Secure Score recommendations (Safe Links, Safe Attachments, impersonation protection) require Microsoft Defender for Office 365, which is not included in Business Standard.
Open Security Gaps
- MFA / Identity: Enable MFA on the Operations account so every account is protected.
- Microsoft 365 Backup: No backup is in place today. This is resolved by Datto SaaS Protection under the new agreement.
- Personal Devices: Personal computers used during the off-season are not managed or protected.
4
Recommended Initiatives
Recommended initiatives for Kenai River Drifters Lodge as part of the transition to a Vicinity agreement. Hands-on work is scheduled during the off-season (October through May) so systems are stable before fishing season begins in June.
| Initiative | Priority | Timeline | Rationale |
|---|---|---|---|
| Move to a Vicinity managed services agreement | High | Oct 2026 | Replaces the current DanTech-billed services and adds SentinelOne, Datto SaaS Protection, PrintX, and Vade email security. |
| Enable MFA on all Microsoft 365 accounts | High | Nov 2026 | The Operations account does not have MFA enabled. Confirm every account has MFA set up. This is a low-cost, high-impact fix. |
| Deploy Datto SaaS Protection for Microsoft 365 | High | Nov–Dec 2026 | No backup exists for email, OneDrive, or SharePoint data. Included with the new agreement. |
| Confirm device inventory and enroll all workstations | Medium | Oct–Nov 2026 | 2 of 5 workstations are not reporting, and documentation from the previous provider is limited. All managed devices need RMM and SentinelOne. |
| Improve Microsoft Secure Score and review licensing | Medium | Before Apr 2027 | Score is 22.85 compared with 46.8 for similar organizations. Several top recommendations require Defender for Office 365; review options before the April 11, 2027 license renewal. |
| Workstation standardization and refresh plan | Medium | Winter 2026–27 | Mixed consumer devices, 3 on Windows 11 Home, and most out of warranty. Move to business-class devices on Windows 11 Pro, replaced in phases during the off-season. |
| Seasonal move and pre-season readiness checklist | Medium | Spring 2027 | A documented shutdown, move, and startup process, plus a Vicinity readiness check before guests arrive in June. |
| Flybook migration support | Medium | TBD (off-season) | Plan the move from Adventure Office to Flybook during the off-season to avoid disruption during peak booking. |
| Confirm point of sale setup | Low | Oct 2026 | Confirm the point of sale system and how payments are handled on lodge workstations. |
Thank you, Kenai River Drifters Lodge.
We appreciate the opportunity to support your business directly. Our commitment is to keep your IT reliable, your data secure, and your team focused on a great season on the river.
Questions? Contact us at support@vicinity.team · (866) 520-6414