new PC checklist: TravelMate P648-M
INITIAL PREP:
- unbox, inventory, plug in to power, NO ETHERNET, power on
- F2 to enter bios -> Main -> F12 boot menu -> Enabled, F10 save and exit
- F12, boot USB
- install NOT upgrade, nuke all partitions
- NOT SURE? First boot, Customize, turn off everything. When prompted, select "Join a local AD domain" (it will happen later)
- "Who's going to use this machine?" Enter "temp" with password temp, answer "temp" to first three security questions, skip fingerprint, no Cortana, all privacy off (scroll down)
- Enable Administrator:
cmd.exe run as administrator
net user administrator /active:yes
net user administrator *
(enter scientific pwd twice)
- Log out of temp and log in as Administrator
- Delete temp account: Computer -> properties -> advanced -> Settings for User Profiles (in the middle) -> select temp and click the delete button
- "temp" user is still there, wtf? Settings -> Accounts -> Other people -> delete
- uninstall "My Office" (or not, it just comes back later anyway)
- Go into drivers dir and run:
Bluetooth Intel
CardReader
Chipset Intel
Fingerprint
G sensor Egistech
Touchpad Synaptics
Turbo Boost Intel (MAYBE NOT NEEDED?)
- Install firmware 1.21
- Plug in ethernet, yes allow discovery
- IMMEDIATELY launch Microsoft Store -> Settings -> Update apps automatically -> OFF
- Check Windows activation <- YES! "digital license"
- Do more Windows updates, reboots, etc. til it's happy
- run \\192.168.1.15\technet FIXME or just download latest from Microsoft VLSC
go to installers -> Microsoft -> Office 2016:
- Customize, no Outlook, no Access
- Launch Word, turn updates on when prompted. Open a new blank doc then File menu -> Account -> ccick Change Product Key, paste the key and go
Office Build number 16.0.4266.1001
- Settings -> Updates -> Advanced Options -> "Give me updates for other MS products when I update Windows," and auto download, and defer feature updates for 365, and defer quality updates for 1
- If dotnet prompt appears, go ahead
- Run Windows updates again, should see some for Office
- OMFG! uninstall App Installer and all the other HORSE SHIT that the MS store automatically installed while I was doing other things (Candy Crush etc.)
- Go back into the Store app and update what's left
- Install:
Chrome
Adobe Reader
Notepad++
VLC
MalwareBytes (Settings -> Account details -> deactivate premium trial, "I don't need realtime protection")
Flash
Java
Windows Essentials 2012 (customize, uncheck all but Photo Galery and Movie Maker, launch and accept)
- Install wifi profile from thumbdrive bat file
- Run DISK CLEANUP
- SYSPREP ("generalize" and shutdown)
==================================
CREATE IMAGE
==================================
- insert Clonezilla USB
- F12, boot USB
- CREATE IMAGE Clonezilla opts: Device/img, local_dev, connect 60GB drive, wait, scan, ctrl-c. Then choose the one with "WINCLONE" in name. Then tab to Done. Beginner, savedisk, default name is fine, source = sda, skip checking, skip, no encrypt, choose restart/shutdown, GO.
==================================
ASSISTANT CAN TAKE IT FROM HERE?
==================================
==================================
RESTORE IMAGE TO CLONE
==================================
- unbox, plug in to power, NO ETHERNET, power on. Takes a loooong time first time
- F2 to enter bios -> Main -> F12 boot menu -> Enabled, F10 save and exit
- insert clonezilla usb, F12, boot USB Lexar whatever SOMETIMES HAVE TO REPEAT THIS STEP before it boots from the Clonezilla USB drive for some fing reason.
- Clonezilla opts: Device/img, local_dev, connect 60GB drive, wait, scan, ctrl-c. Pick sdc1 APPLE_SSD, tab to "Done", do beginner, pick restoredisk, choose (the only) image, choose (the only) target (sda), skip, choose, confirm, confirm
==================================
POST-CLONE, PRE-USER:
==================================
- Boot up, follow prompts, etc. Skip wifi for now
- make local admin temp/temp again SIGH, skip fingerprint, no Cortana, turn off all the privacy shit (remember to scroll down)
- Enable Administrator:
cmd.exe run as administrator
net user administrator /active:yes
net user administrator *
(enter scientific pwd twice)
- Log in as Administrator, nuke temp again AND "default user 01" if it appears...wtf?
- Double click "add wifi profile" from thumbdrive, make sure it connects to Crossroads, and wait a few minutes
- Restart when prompted for "LITE-ON" device setup, ignore DOS errors
- "Remind me later" flash update, Ninite will handle later
- Install firmware 1.21
- Launch Word, yes to install updates, activate over the Internet
- Set time zone
==================================
FOR DESIGNATED USER:
==================================
- Set computer name to jsmith-ap6 (John Smith Acer P6) or, student-ap6-01 thru 12
- Join to AD Crossroads.local at the same time
- Reboot when prompted
- Log in as DOMAIN administrator
- Install/configure:
- ESET (enter reg code)
- Ninite (apply "update everything" policy)
- Meraki agent
- Splashtop Streamer
- Google Drive
- Google Backup and Sync
- Move PC into OU: Crossroads.local/Crossroads/Computers/StaffLaptops2018 or /Barn Lab and reboot
- Log in as caadmin and do cmd as admin and run gpupdate /force and then reboot again
•• If teacher is currently in Sync OU, MOVE THEM TO THE NOSYNC OU FIRST!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
- Log in as the teacher or a student, test printers and drive mappings
- Windows updates...lol
- INVENTORY and STICKER -- first PC was 20180601, serials are along the lines of NXVCKAA00163302EBC3400
••••••• LEFT OFF HERE FOR GWEN MARTIN'S
- Settings -> File Explorer Options -> show full path, don't hide filename suffixes
- Set "Default apps" (web -> Chrome, mail -> Chrome, PDFs -> Acrobat, Music -> Windows Media Player, Videos -> VLC)
- Copy their old data from server home to new computer
- Configure Google Backup and Sync
- Give it time to sync/upload to Google (leave plugged in/on)
- DIS!!!able their home share on Windows server
==================================
LATER:
==================================
DELETE OLD MACHINES FROM Ninite