New Machine Setup and Deploy Procedures



New Machine Setup and Deploy Procedures

Configuration of Desktop Image

• Installation

o Set “Boot from CD-ROM” in BIOS

o Install Base OS from CD on Machine

o Windows XP PRO OS License

▪ 12345-XXXXX-67890-XZPDQ-BOOTY

o Name – Installs

o Company – Your Company

o Computer Name

▪ Two Letter site abbreviation plus 5 digit serial number

• EXAMPLE – DEPT240

• Copy the i386 folder located on the installation CD to the root of C:\

o EXAMPLE – C:\i386

• Run regedit from the Start Menu

o Click “Edit”

o Click “Find”

o Enter “sourcepath” in the “Find What” window line

o There are 3 instances of “sourcepath” that need to be changed

▪ 2 D:\ pointers need to be changed to C:\

▪ 1 D:\i386 pointer needs to be changed to C:\i386

• Install updates for video drivers, audio drivers, chipset, NIC drivers. Check Device Manager for error messages (Use Grey Dell Drivers Disk)

• Join the Domain

o Click “Start”

o Click “Settings”

o Click “Control Panel”

o Click “System”

o Click “Computer Name” Tab

o Click “Change”

▪ Add “” as the Domain

▪ Use “Domain Admin” account to validate

o Reboot

▪ Login as “Local Administrator”

• Run “Critical Updates” including Service Pack 2 including

o

o Include .Net Framework

o Include Root Certificates

o Do Not include Journal Viewer

• Remove “Auto-Critical Updates”

o Click “Start”

o Click “Settings”

o Click “Control panel”

o Click “Automatic Updates”

▪ Click “Turn Off Automatic Updates”

• Configuring “Classic View”

o Right Click “Start”

o Click “Properties”

o Check “Classic Start Menu”

▪ Click “OK”

o Right Click “Desktop”

o Click “Themes” Tab

▪ From drop down Theme menu choose “Windows Classic”

▪ Click “OK”

• Create Temp folder on root of C:\

o C:\TMP

Set Drive Permissions

o Right Click “Start”

o Click “Explore”

o Right Click “Local Disk (C:)”

o Click “Properties”

o Click “Security” Tab

Set Permissions for Root of C: as follows:

• Administrators

o FULL CONTROL

• Creator Owner

o REMOVE ACCOUNT

• Everyone Group

o Check READ & EXECUTE (This will add List Folder and Read)

• System

o FULL CONTROL

• User (machine name\users)

o READ & EXECUTE

Set Permissions for the following folders as follows:

• C:\Document and Settings

o DOES NOT Inherit

• C:\i386

o DOES Inherit

• C:\Program Files

o DOES NOT Inherit

• C:\Windows

o DOES NOT Inherit

• C:\TMP

o DOES NOT Inherit

o Remove ALL Permissions

o Add Group Everyone

▪ FULL CONTROL

Set Power Save Functions for Monitor

• Click “Start”

• Click “Settings”

• Click “Control Panel”

• Click “Power Options”

o Set “Turn off monitor” to 15 minutes

Log in as Domain Admin

Installation of Remote Administration Software

• Setup files are located at

o \\share\installs\administration\Radmin\radmin30

o Click “rview30”

o Click “Run”

o Check “Next”

o Click “I Accept”

o Click “Next”

o Click “Install”

o Click “Finish”

o Install Rserv 30

• Enable Windows NT Security

• Click “Permissions”

• Click “Add”

• Add “Domain Admins”

• Change access to “All Access”

• Click “Apply”

• Click “Yes”

• Click “OK”

• Enter License (Text file under Radmin)

• Click “OK”

• Click “Ok”

• Click “Exit”

• DO NOT RESTART

• Double Click “Settings for remote administrator server”

o Click “Options”

▪ Check “Hide tray icon”

▪ Click “OK”

▪ Click “Exit”

• Delete icon from Start\Program Group

Install Adobe Acrobat Reader 7.0.8

• Setup files are located at

o \\it-svr\installs\Adobe Reader 7.0.8-full

o Accept all defaults and Click Finish

• Disable Offline Files

o Right Click “Start”

o Click “Explore

o Click “Tools”

o Click “Folder Options”

o Click “Offline Files” Tab

Uncheck “Enable Offline Files”

Install Shockwave Player and Flash Player

• Open Internet Explorer and go to “

• Click “Get Macromedia Flash Player”

• Uncheck “Google Toolbar”

• Click “Install Now”

• Click “Install”

• DO NOT REBOOT

Install Java Runtime Environment

• Click file located at

o “\\it-svr\installs\Java V5 Update 9”

• Click “RUN”

• Click “Accept”

o Click “Next”

• Click “Typical”

o Click “Next”

• Click “Finish”

• Click “YES” to reboot

Check Firewall Status is in OFF Position

• Right Click “My network Places”

o Click “Properties”

▪ Right Click “Local Area Connection”

▪ Click “Properties”

▪ Click “Advance Tab”

▪ Click “Settings”

▪ Click “OFF”

Configure Profiles using “Local Admin Account”

• Company Desktop

o Company Logo .BMP located at

▪ “\\share\installs\logo.bmp”

▪ Paste file in “C:\Windows”

▪ Set as Desktop wallpaper

▪ Set background color to black

o Set Default Screen Saver to 10 minutes

▪ No Password

o Adjust for “Best Performance”

▪ Right Click “My Computer”

▪ Click “Properties”

▪ Click “Advance” Tab

▪ Click “Performance Settings”

• Check “Best Performance”

• Click “Apply”

• Click “OK”

o Set homepage to “”

▪ Set page quickly, timeout is 10 seconds before page changes

o Disable MSN Messenger

▪ Open MSN Messenger

▪ Click “Tools”

▪ Click “Options”

▪ Click “Preferences”

• Uncheck “Start with Windows”

o Remove IE Subpath from Registry

▪ Click “Start”

▪ Click “Run”

▪ Type “regedit”

▪ Go to “HK_Local_Machine\Software\Microsoft\Active Setup\Installed Components\44BBA840-CC51-11CF-AAFA-00AA00B6015C

▪ Delete stubpath key

o Configure all application toolbars

▪ Verify that all auto updates have been disabled

o Run all software

o Disable registration alerts

Copying Profile

• Log on as another “Administrative User”

o Right Click “My Computer”

o Click “Properties”

o Click “Advanced”

o Click “User Profile Settings”

• Delete “Setup” account

o Highlight “Local Admin” account

• Click “Copy To” (If this is grayed out…Reboot and try again)

• Browse to

• C:\Document and Settings

• Click “OK”

• Add “Default User”

o Should read, “C:\Document and Settings\Default User”

• Go to “Permitted to use”

o Click “Change”

o Type “Everyone”

o Click “OK”

o If done correctly a prompt will popup and state that you are overwriting the “Default User Profile”

o Click “Yes”

o Click “OK”

o Click “OK”

Install Office 2003

• Installation files are located at

o “\\share\off2003

o Office 2003 Default install .Bat

Install Norton Antivirus Corporate Edition

• See Ed for software push

• Ignore virus definitions out of date message, definitions will be updated by the server

Install User Specific Applications

Copy Data Files to Appropriate Locations

• My documents to Home folder

• Favorites and templates to profile

• Shared files to network drives

Connect printers, map LPT ports if applicable (Citrix, DOS apps)

• Check connectivity

Remove unnecessary shortcuts from the desktop and Start\Program section

CHECK THAT THE FIREWALL IS OFF

................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download