Refurbished E530 Windows 10

Lenovo ThinkPad Edge E530

INITIAL PREP:

- Insert Win10 USB installer, F12, choose USB, plug in ethernet

- Activation prompt -- either enter key now, or do "I don't have one" and do it later. Pick Windows 10 Pro

- First boot, Customize, turn off everything. When prompted, select "Organization" then at the Microsoft Account page, select "Domain join instead" (it will actually happen later)

- "Who's going to use this machine?" Enter "temp" with password temp, answer "temp" to first three security questions, skip fingerprint, no Cortana, all privacy off (scroll down)

- Enable Administrator:

cmd.exe run as administrator

net user administrator /active:yes

net user administrator *

(enter scientific pwd twice)

- Log out of temp and log in as Administrator

- Delete temp account: Settings -> Accounts -> Other people -> delete

- Set time zone

- Run Windows updates (will find all the drivers, woot!)

- INVENTORY and STICKER

- uninstall "My Office" (or not, it just comes back later anyway)

- run \\192.168.1.15\technet

go to installers -> Microsoft -> Office PC 2016:

- Customize, no Outlook

- Launch Word, turn updates on when prompted. Open a new blank doc then File menu -> Account -> click Change Product Key, paste the key

- Settings -> Updates -> Advanced Options -> "Give me updates for other MS products when I update Windows," and auto download, and defer feature updates for 365, and defer quality updates for 1

- Install from technet:

Chrome

Adobe Reader

Notepad++

VLC

MalwareBytes (Settings -> Account details -> deactivate premium trial, "I don't need realtime protection")

Java

Windows Essentials 2012 -- if dotnet prompt appears, go ahead -- if it fails, just ignore and proceed, it seems not to need it -- customize, uncheck all but Photo Gallery and Movie Maker, launch and accept

Flash is apparently already on there

Google Backup and Sync (or NOT, on a loaner)

- "Remind me later" flash update, Ninite will handle later

- Manually connect to Crossroads wifi

==================================

FOR DESIGNATED USER:

==================================

- Set computer name to jsmith-e530 (John Smith E530) or loaner-e530-01

- Join to AD Crossroads.local at the same time

- Reboot when prompted

- Log in as administrator

- Install/configure:

- ESET (enter reg code)

- Ninite (apply "update everything" policy)

- Meraki agent

- Move PC into OU: Crossroads.local/Crossroads/Computers/StaffLaptops2018 or /Barn Lab and reboot

- Log in as caadmin and do cmd as admin and run gpupdate /force and then reboot again

•••••••• If teacher is currently in Sync OU, MOVE THEM TO THE NOSYNC OU FIRST!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

- Log in as the teacher, test printers and drive mappings

- Settings -> File Explorer Options -> show filename suffixes and hidden folders

- Set "Default apps" (web -> Chrome, mail -> Chrome, PDFs -> Acrobat, Music -> Windows Media Player, Videos -> VLC)

- Copy their old data from server home to new computer

- Install Google Backup and Sync

- Give it time to sync/upload to Google (leave plugged in/on)

- Windows updates...lol

- DIS!!!able their home share on Windows server