Lenovo ThinkPad Edge E530
INITIAL PREP:
- Insert Win10 USB installer, F12, choose USB, plug in ethernet
- Activation prompt -- either enter key now, or do "I don't have one" and do it later. Pick Windows 10 Pro
- First boot, Customize, turn off everything. When prompted, select "Organization" then at the Microsoft Account page, select "Domain join instead" (it will actually happen later)
- "Who's going to use this machine?" Enter "temp" with password temp, answer "temp" to first three security questions, skip fingerprint, no Cortana, all privacy off (scroll down)
- Enable Administrator:
cmd.exe run as administrator
net user administrator /active:yes
net user administrator *
(enter scientific pwd twice)
- Log out of temp and log in as Administrator
- Delete temp account: Settings -> Accounts -> Other people -> delete
- Set time zone
- Run Windows updates (will find all the drivers, woot!)
- INVENTORY and STICKER
- uninstall "My Office" (or not, it just comes back later anyway)
- run \\192.168.1.15\technet
go to installers -> Microsoft -> Office PC 2016:
- Customize, no Outlook
- Launch Word, turn updates on when prompted. Open a new blank doc then File menu -> Account -> click Change Product Key, paste the key
- Settings -> Updates -> Advanced Options -> "Give me updates for other MS products when I update Windows," and auto download, and defer feature updates for 365, and defer quality updates for 1
- Install from technet:
Chrome
Adobe Reader
Notepad++
VLC
MalwareBytes (Settings -> Account details -> deactivate premium trial, "I don't need realtime protection")
Java
Windows Essentials 2012 -- if dotnet prompt appears, go ahead -- if it fails, just ignore and proceed, it seems not to need it -- customize, uncheck all but Photo Gallery and Movie Maker, launch and accept
Flash is apparently already on there
Google Backup and Sync (or NOT, on a loaner)
- "Remind me later" flash update, Ninite will handle later
- Manually connect to Crossroads wifi
==================================
FOR DESIGNATED USER:
==================================
- Set computer name to jsmith-e530 (John Smith E530) or loaner-e530-01
- Join to AD Crossroads.local at the same time
- Reboot when prompted
- Log in as administrator
- Install/configure:
- ESET (enter reg code)
- Ninite (apply "update everything" policy)
- Meraki agent
- Move PC into OU: Crossroads.local/Crossroads/Computers/StaffLaptops2018 or /Barn Lab and reboot
- Log in as caadmin and do cmd as admin and run gpupdate /force and then reboot again
•••••••• If teacher is currently in Sync OU, MOVE THEM TO THE NOSYNC OU FIRST!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
- Log in as the teacher, test printers and drive mappings
- Settings -> File Explorer Options -> show filename suffixes and hidden folders
- Set "Default apps" (web -> Chrome, mail -> Chrome, PDFs -> Acrobat, Music -> Windows Media Player, Videos -> VLC)
- Copy their old data from server home to new computer
- Install Google Backup and Sync
- Give it time to sync/upload to Google (leave plugged in/on)
- Windows updates...lol
- DIS!!!able their home share on Windows server