of 5— Build the master document set

What you'll accomplish

By the end of this guide, you'll have a shared Claude Project your entire help desk team uses — loaded with your organization's full IT documentation library, configured with consistent response formats, and set up so that every analyst gets environment-specific answers. You'll move from one analyst having a useful ChatGPT setup to your whole team having a shared, maintained AI assistant that learns your environment over time.

What you'll need

Claude Pro account ($20/month) — one per analyst who will use it
Your full documentation library: KB articles, runbooks, network diagrams (text), environment overview, escalation procedures
2-3 hours for initial build; 30 minutes/month for maintenance
Cost: $20/month per analyst (Claude Pro)
Prerequisites: Read the Level 3 guide on building a basic Claude Project first — this guide extends that foundation

Advanced Guide: Build a Team-Wide Custom IT Assistant with Claude Projects

Step 1: Build the master document set

The power of a team Claude Project comes from comprehensive, well-organized documentation. Before creating the Project, assemble:

Core documents (required):

Environment Master — your complete infrastructure in one document:

Copy and paste this

ENVIRONMENT: [Org Name] Help Desk Reference
Last updated: [date]

INFRASTRUCTURE:
- End user OS: Windows 11 23H2 (80%), Windows 10 22H2 (20%)
- Domain: [domain.local] — on-prem AD + Azure AD hybrid (Azure AD Connect sync)
- Exchange: Exchange Online (M365 E3) — NOT on-prem
- Servers: Windows Server 2022, Server 2019; hosted in [datacenter/Azure/AWS]
- File servers: [\\fileserver01\shares], [\\fileserver02\department]
- Print servers: [\\printserver01]
- VPN: Cisco AnyConnect — LDAP auth against on-prem AD
- Remote access: TeamViewer for user devices, RDP for servers (require Tier 2 approval)
- Ticketing: ServiceNow (self-service: [URL], agent URL: [URL])
- Endpoint mgmt: Intune for cloud-joined, SCCM for legacy; all new devices = Intune
- Network: 192.168.x.x internal, Cisco switches, Palo Alto firewall

M365 TENANT:
- Admin center: [URL]
- Exchange admin: [URL]
- Intune: [URL]
- Tier 1 can: password reset, MFA reset, license assign/remove, group add/remove
- Tier 1 CANNOT: create mailboxes, change mail flow rules, access other users' mail

AD DETAILS:
- Primary OU structure: [describe your OU structure]
- Standard groups: [list key security groups and what they grant]
- Password policy: 90-day expiry, 8-char minimum, complexity required
- Account lockout: 5 failed attempts, 15-minute auto-unlock

ESCALATION PATH:
- Tier 1 (Help Desk): Password resets, software install/uninstall, hardware basics, network connectivity, printer setup, account unlocks, VPN issues, M365 access
- Tier 2 (Sysadmin): Server issues, AD GPO, M365 advanced, security incidents, new hardware provisioning
- Tier 3 (Vendor): Hardware warranty, ISP, Microsoft Premier support
- Escalate with: [describe your standard escalation note format]

KB Articles Export — export or copy your 20-30 most-referenced articles
- Group by category (password/auth, network/VPN, printing, M365, hardware)
- Include article ID numbers so Claude can reference them
Known Issues Register — current open incidents and their status:

Copy and paste this

KNOWN ISSUES (updated: [date])
- [Issue description] — workaround: [workaround] — expected resolution: [date/unknown]
- [Issue description] — do NOT try to resolve independently, escalate to Tier 2

Approved/Blocked Software List:

Copy and paste this

APPROVED SOFTWARE (can install without approval):
- [list]

REQUIRES APPROVAL BEFORE INSTALL:
- [list]

BLOCKED (never install, remove if found):
- [list]

ENVIRONMENT: [Org Name] Help Desk Reference Last updated: [date] INFRASTRUCTURE: - End user OS: Windows 11 23H2 (80%), Windows 10 22H2 (20%) - Domain: [domain.local] — on-prem AD + Azure AD hybrid (Azure AD Connect sync) - Exchange: Exchange Online (M365 E3) — NOT on-prem - Servers: Windows Server 2022, Server 2019; hosted in [datacenter/Azure/AWS] - File servers: [\\fileserver01\shares], [\\fileserver02\department] - Print servers: [\\printserver01] - VPN: Cisco AnyConnect — LDAP auth against on-prem AD - Remote access: TeamViewer for user devices, RDP for servers (require Tier 2 approval) - Ticketing: ServiceNow (self-service: [URL], agent URL: [URL]) - Endpoint mgmt: Intune for cloud-joined, SCCM for legacy; all new devices = Intune - Network: 192.168.x.x internal, Cisco switches, Palo Alto firewall M365 TENANT: - Admin center: [URL] - Exchange admin: [URL] - Intune: [URL] - Tier 1 can: password reset, MFA reset, license assign/remove, group add/remove - Tier 1 CANNOT: create mailboxes, change mail flow rules, access other users' mail AD DETAILS: - Primary OU structure: [describe your OU structure] - Standard groups: [list key security groups and what they grant] - Password policy: 90-day expiry, 8-char minimum, complexity required - Account lockout: 5 failed attempts, 15-minute auto-unlock ESCALATION PATH: - Tier 1 (Help Desk): Password resets, software install/uninstall, hardware basics, network connectivity, printer setup, account unlocks, VPN issues, M365 access - Tier 2 (Sysadmin): Server issues, AD GPO, M365 advanced, security incidents, new hardware provisioning - Tier 3 (Vendor): Hardware warranty, ISP, Microsoft Premier support - Escalate with: [describe your standard escalation note format]

KNOWN ISSUES (updated: [date]) - [Issue description] — workaround: [workaround] — expected resolution: [date/unknown] - [Issue description] — do NOT try to resolve independently, escalate to Tier 2