1. Power on, agree to terms for Win 7 Pro, create new user with username "ladmin" and the usual password (OR change built-in "HP" user to "ladmin" and set password), set computer name to xyyyyy-zzz (x = user's first initial, yyyyy = user's last name, zzz = computer model number.) Accept recommended settings for updates, set time zone, SKIP wifi for now.
2. (UPDATE May 2017, this doesn't seem to work anymore, I type it by hand.) Attach thumbdrive, copy "wifi" folder to C:, double-click the "openmetojoinwifi" batchfile within. When prompted, specify that this is a "Work" network. DELETE C:\joinwifi afterward.
(This joins the wifi without having to type the 100-character passphrase. I snagged this script off of some old "Postimage" folder found on server.)
3. (On the HP machines we got in summer 2016) Agree to Microsoft security essentials, accept IE7 recommended settings if needed.
4. (On the HP machines we got in summer 2016) REMOVE crapware including but not limited to:
- office 2013 trial
- foxit pdf
- Discover HP Touchpoint Manager
- HP Client Security Manager
- HP Connection Manager
- Microsoft Security Essentials
- Vipre, if present (old antivirus)
- (any other bundled antivirus stuff e.g. McAfee)
5. Open Print Management (Start -> run, type "print management"). Expand Print Servers, right-click on [thiscomputer'sname] and select "Import from a file." Choose "ALLPRINTERS" which is a 107MB Printer Migration File. Specify "Keep existing printers" for Import mode; list ALL printers in directory; DO convert LPR Ports to Standard Port Monitors; wait forever. (Based on this: https://technet.microsoft.com/en-us/library/cc722360(v=ws.11).aspx) UPDATE May 2017 this doesn't seem to add all the printers anymore. I DO NOT KNOW WHY. Nope, we push the printers down with GPO now, yay!
6. (On the HP machines we got in summer 2016) Run HP Support Assistant (big question mark icon in lower right), make it less intrusive about warranty and updates etc. Leaving it on there because it might be handy if we need to get something fixed.
7. INSTALL from server ("\\CA-2016-SRV\technet\installers" or "\\CA-2016-SRV\installs"):
- Office 2010 MKA, default install, ACTIVATE AFTERWARD!!!!
- Adobe Reader
- ESET antivirus (leave "livegrid" enabled, and enable unknown app detection option, and copypaste license key when prompted)
- Google Chrome
- MalwareBytes (then deactivate premium trial)
- FileHippo
- Meraki agent
- Notepad++
- Bullzip PDF Printer (allow all three install options -- Ghostscript etc.)
- Silverlight (UNcheck options for Bing/MSN defaults) (may already be present, it will say if so)
- VLC
- Windows Live Photo Gallery (customize installation, then UNcheck all but the "Photo Gallery and Movie Maker" options)
8. Copy Crossroadsdesktop.png to C:
9. THEN join to AD:
Right-click Computer, -> Properties, scroll down to "Computer name, domain and workgroup secttings," click "Change settings", where it says "to rename this computer..." click "Change", where it says "member of" (currently "Workgroup"), select "Domain", and enter "Crossroads.local"; when prompted, enter caadmin and the server password, make sure it says "Welcome to the domain" and restart when prompted.
10. Turn off Windows Firewall in ALL THREE PROFILES (Domain, Private, and Public) so that PDQDeploy can talk to it and so we can RDP in for tech support reasons Nah, we manage this through group policy now too.
11. Use PDQDeploy to install Java and Flash Player.
(If instead you do Flash Player by hand, COPY TO C: FIRST, it self-destructs the local installer after installing. If you download a fresh copy, be sure to WIDEN the browser window so that it shows the stupid bundle options, and UNcheck the McAfee and Intel Security ones. Adobe, you SUCK!)
12. Test teacher login, make sure drive mappings worked. If not, check AD profile -- see FIXME other page about that
13. While logged in as teacher, set crossroads.jpg as desktop background