Setup for a New Computer Windows 10
Change Parameters and Clean Up
Change User Profile Settings
Change IE and Chrome Settings
Changes to Task Scheduler
Shortcuts
Change User Profile Settings (Administrator Permissions)
Network Configuration
Printers
Shares
Software
Disable Notifications for Firewall off
Powercfg
Conference Room Computers

Setup for a New Computer Windows 10

Network Configuration Database
- Add Computer or Modify Information for new software install
- If Os or Office product changes make note in Database
Add folder in Machine Configuration
- Add photos of machine and documentation to folder
Create hanging File folder for printed documentation - font size 12
Register machine with Manufacturer
- HP Computers - Registration to ll@domain.com
- for HP register Care Pack
OS and Drivers
- Install Windows 10
  - Accept Defaults on setup except for monitoring
  - Select create Organizational account then a Domain Account
  - UserName: domainname if need user to setup machine.
  - Password: domainpassword for server domainpassword
  - if need Hint: s
- Drivers, Bios, IE Update
Setup Initial User
- UserName: domainname if need user to setup machine.
- if necessary preferably not
  - windows Login: domainnamedomainname@hotmail.com
  - Email address for Windows Store: domainnamedomainname@hotmail.com
- Activate machine Administrator account
- Set machine Administrator's password to domainpassword default
- Enable Administrator Account
Machine Administrator
- Login as Machine Administrator
- Set Time
- DO Later
  - Install ninite software
  - set Google Chrome as default
  - Pause updates for 7 days
  - See Change parameters and Clean Up
  - See Change User Profile Settings
  - See Change IE and Chrome Settings
  - also for Administrators Change User Profile Settings (Administrator Permissions)
  - Remove extra/un-needed programs
  - Add Feature ASP.net from Features in Progams
  - Wifi - Mobil Hotspot - Enable Remotely - Turn Off
  - uninstall - hp Client Security Manager
- Turn off Autosetup in Newtwork Discovery (Private)
- Turn on Public folder sharing in all networks
- Delay Windows updates for 7 days
- Change power scheme for never go to sleep; never turn off screen
- Join domainname
Network configuration:
- See Network Configuration for DHCP Settings
- Remove same named machines from Domain Controller
Domain (admin)
- Logon with domain/domainname (administrator) permissions
- Turn on Service: “Functional Discovery Resource Publication” WSD
- Function Discovery Provider Host
- Function Discovery Resource Publication
- SSDP Discovery
- UPnP Device Host
- Install beyondcompare for the software copy
- copy 'Software for Workstations' to public…Downloads
- Remove extra/un-needed programs
- Install Software
- Set Google Chrome as default
- Add Ublock Origin and Extra
- Disable Hibernation
- HP Z2 G# - Delete Volume D:
- If
  - commercial desktop or laptop use “hp image assistant” to update
  - for home use computer - use “HP support assistant”
- PC Settings … System …….. Power and Sleep … when plugged in Never turn off monitor or go to sleep
- PC Settings … Network & Internet … Ethernet … Click on Connector … Make this PC Discoverable Turn on
- PC Settings … Network & Internet … Ethernet … Change Adapter Options … Turn power management off
- PC Settings … Accounts ……… Sign-in options … Require sign-in when PC wakes from sleep
- PC Settings … Time & Language … Eastern time zone … Adjust for Daylight saving … On
- PC Settings … Update and Security … Windows Update … Advanced options … Notify to Schedule restart … give me updates for other Microsoft
- PC Settings … Update and Security … Windows Update … Advanced options … Defer upgrades … Check on
- PC Settings … Update and Security … Windows Update … Advanced options … Choose how updates are delivered … Updates from more than one place … On … PCs on my local network
- PC Settings … Update and Security … Windows Defender … Real time … On …Cloud Based … On … Automatic Sample … On
- If not already - Install Chrome
- DO Later
  - See Change parameters and Clean Up
  - See Change User Profile Settings
  - See Change IE and Chrome Settings
  - also for Administrators Change User Profile Settings (domainname (administrator) Permissions)
- Remove extra/un-needed programs
- Turn off Firewall for the Work network and Domain SEE: Disable Notifications for Firewall off
- See Changes Task Scheduler
Permissions
- Add Domain Users to Power Users
- Add User to Administrators Security Group
Domain user (firstname.lastname)
- Logon with domainname/firstname.lastname
- Turn on Service: “Functional Discovery Resource Publication” WSD
- Install beyondcompare for the software copy
- copy 'Software for Workstations' to public…Downloads
- Remove extra/un-needed programs
- Install Software
- Set Google Chrome as default
- Add Ublock Origin and Extra
- Disable Hibernation
- HP Z2 G# - Delete Volume D:
- If
  - commercial desktop or laptop use “hp image assistant” to update
  - for home use computer - use “HP support assistant”
- PC Settings … System …….. Power and Sleep … when plugged in Never turn off monitor or go to sleep
- PC Settings … Network & Internet … Ethernet … Click on Connector … Make this PC Discoverable Turn on
- PC Settings … Network & Internet … Ethernet … Change Adapter Options … Turn power management off
- PC Settings … Accounts ……… Sign-in options … Require sign-in when PC wakes from sleep
- PC Settings … Time & Language … Eastern time zone … Adjust for Daylight saving … On
- PC Settings … Update and Security … Windows Update … Advanced options … Notify to Schedule restart … give me updates for other Microsoft
- PC Settings … Update and Security … Windows Update … Advanced options … Defer upgrades … Check on
- PC Settings … Update and Security … Windows Update … Advanced options … Choose how updates are delivered … Updates from more than one place … On … PCs on my local network
- PC Settings … Update and Security … Windows Defender … Real time … On …Cloud Based … On … Automatic Sample … On
- If not already - Install Chrome
- DO Later
  - See Change parameters and Clean Up
  - See Change User Profile Settings
  - See Change IE and Chrome Settings
  - also for Administrators Change User Profile Settings (domainname (administrator) Permissions)
- Remove extra/un-needed programs
- Turn off Firewall for the Work network and Domain SEE: Disable Notifications for Firewall off
- See Changes Task Scheduler
See Installing Office. Configure Microsoft Office on Machine.
- Set up Outlook. See Setting Up OutLook.
Windows Updates - all Windows 10 updates
IE Update to Whatever newest
Shares - See Shares
Printers - See Printers
Software
- For all machines see Software
- For Workstations See Software for Drafting Machines
- Update AntiVirus to current definitions.
- Setup Backup GFI or Handy Backup Platinum 4 See: Setup Backup section in User Add to domainname
  - run as service and
  - use Machine user as Log On As account
  - and authorization for his workstation backup folder.
- PC Settings … Update and Security … Backup … Add a drive Show all network locations ??????
Activate
Add shortcuts see Shortcuts
Run Belarc and store in Machine Configuration for machine
Clone Drive

Change Parameters and Clean Up

Do all windows updates
Windows Updates - Check for updates
Graphics Workstations - Set maximum and minimum virtual memory to 1.5 times actual memory
Allow users to remotely connect
- do not authorize anyone except Administrators
- Check Allow connections only …
Performance
- on older computers - Stop fading and smooth scrolling
Firewall
- Private network: turn off
- Domain network: turn off;
- public network: turn on
Load extra drivers
- Chipset
- Video
- audio
Check Power management on Network and wireless Card and turn off
Disable wireless adapter on Desktops

Change User Profile Settings

Check screen size to appropriate for user
Reset power scheme Never,never, never
Reset power scheme
- Use default plan
  - Battery
    - Dim the display
    - Turn off display: default
    - Put to sleep: default
  - Plugged in
    - Full bright
    - Turn off display: Never
    - Put to sleep: Never
- Advanced Power Settings (settings for power: Balanced)
  - powercfg /list
  - powercfg -EXPORT c:profil-alim.pow 381b4222-f694-41f0-9685-ff5bb260df2e
  - powercfg -EXPORT C:nom-de-fichier.pow
  - powercfg -SETACTIVE 9e8a06b8-19fa-430d-ba57-34c08fee489e
  - Select Change settings that are currently unavailable
  - Change settings
    - Require password on Wakeup Setting: Yes
    - Hard Disk:
      - battery default
      - power 300 (ssd do not change)
    - IE JavaScript: Maximum Performance
    - Desktop Background…Slide Show: Available
    - Wireless: Maximum Performance
    - Sleep
      - Laptop
        
        After:
        
        Battery: Whatever is set as Default
        
        Plugged In: Never
        
        Hybrid Sleep:
        
        Battery: Off
        
        Plugged In: Off
        
        Hibernate:
        
        Battery: Never
        
        Plugged In: Never
        
        Wake Timers:
        
        Battery: Whatever is set as Default
        
        Plugged In: Enable
      - Desktop
        
        After: Never
        
        Allow Hybrid Sleep : On
        
        Hibernate: Never
        
        Wake Timers: Enabled
    - USB Selective Suspend: Disabled
    - Intel Graphic settings … Graphic Power Plan … Balanced
    - PB and Lid
      - Laptop
        
        Lid Close:
        
        Battery: Hibernate
        
        Plugged In: Hibernate
        
        Power Button:
        
        Battery: Shutdown
        
        Plugged In: Shutdown
        
        Sleep Button:
        
        Battery: Shutdown
        
        Plugged In: Do Nothing
      - Desktop
        
        Power Button: Shutdown
        
        Sleep Button: Do Nothing
    - PCI Express: OFF
    - Processor: Whatever is set as Default
    - Display
      - Laptop
        
        Turn off:
        
        Battery: Whatever is set as Default
        
        Plugged In: Never
        
        Display Brightness:
        
        Battery: Whatever is set as Default
        
        Plugged In: 100
        
        Dimmed Display:
        
        Battery: Whatever is set as Default
        
        Plugged In: Whatever is set as Default
        
        Adaptive Brightness:
        
        Battery: Off
        
        Plugged In: Off
      - Desktop
        
        Turn off: Never
        
        Enable adaptive brightness : Off
    - Multimedia
      - Sharing: Whatever is set as Default
      - Playing Video: Whatever is set as Default
    - Battery
      - Critical Action: Hibernate
      - Low Level: 12
      - Critical Level: 7
      - Low Battery Notification: On
      - Low Battery Action: Do nothing
      - Low Battery Level: 9
Turn on numlock key
Optional for new computers - Performance
- On older computers - Stop fading and smooth scrolling
PC Settings … Personalization … Themes … Theme Settings … Screen saver “domain” and 64 minutes … password protect
Action Center - in Control Panel … System and Security … Security Maintenance … turnoff extraneous messages (like messages about firewall)
- Change Action Center Settings
- Remove unnecessary notifications
PC Settings … Personalization … Themes … Theme Settings … Desktop Background … Background … Slideshow … C:\Windows\Web\Screen
PC Settings … System … Tablet Mode … When I sign in go to the desktop
PC Settings … Network & Internet … WiFi … Manage Wi-Fi Settings … Connect to suggested open hotspots … toggle the switch to Off.
PC Settings … Network & Internet … WiFi … Manage Wi-Fi Settings … Connect to networks shared by my contacts … toggle the switch to Off.
PC Settings … Network & Internet … WiFi … Manage Wi-Fi Settings … Paid WiFi Services … toggle the switch to Off.
PC Settings … Network & Internet … Ethernet … Change Advanced Sharing Options … Turn on Network discovery … Turn on file and printer sharing … HomeGroup …Use user accounts
PC Settings … Network & Internet … Proxy … Turn off automatic detection of proxy setup
PC Settings … Network & Internet … Ethernet … Windows Firewall … Turn Off
PC Settings … Privacy … General … Send Microsoft info about How I … Off
PC Settings … Privacy … General … Manage my Microsoft advertising … Personalized ads in this browser … Off
PC Settings … Privacy … Location … Location for this device is off
PC Settings … Privacy … Speech, inking, & typing … Stop getting to know me (should show option “Get to Know Me”
PC Settings … Privacy … Accounting info … Off
PC Settings … Privacy … Other Devices … Sync with Devices … Off
Action Center - in Control Panel … System and Security … Security Maintenance … turnoff extraneous messages (like messages about firewall)
PC Settings … Devices … Let Windows Manage my Default Printer … Turn Off
Menu Networks
PC Settings … Personalization … Start … Choose which folders appear on start … File Explorer … Settings Documents … Downloads … Pictures … Network … Personal Folder
Add favorite Network Places
- Dropbox
- Link to the machines configuration folder
- Programfiles
Check Recent Programs
Performance
- On Older PC's - Stop fading and smooth scrolling

Change IE and Chrome Settings

IE
- Always open pop-up in new Tab
- Change Intranet to On: Internet options… Security… Intranet… Sites… Uncheck “Automatically Detect Intranet Network”; then check three options below
  - See: http://stevenjwkennedy.wordpress.com/2009/03/25/automatically-detect-intranet-network/
- Connections .. LAN settings … Uncheck “Automatically detect settings”
- IE 11 May need - use software rendering instead of GPU rendering IE: Options .. Advanced … Check - Use software …..
- Add Google as search

Chrome
- Open and skip login
- Reopen and set size
- Change the default search engine in Microsoft Edge
  - Enter the search engineâ€™s website google.com
  - Select More actions (…)> Settings and then scroll down to select View advanced settings.
  - In the list under Search in the address bar with, choose Change
  - ???Select the website and then select Add as default.

Changes to Task Scheduler

Startup tab
- reeview and disable anything that is just not needed

Shortcuts

Office on start menu and quicklaunch
- Word
- Excel
- Powerpoint
- Outlook
Others
- Dropbox
- SharedData
Large Conference Room
- Start Menu
- Task Bar
- Desktop
  - Dropbox

Change User Profile Settings (Administrator Permissions)

In Addition to: Change User Profile Settings
Change Administrator Security settings
- Local security Policy
  - Navigate to your local security policy on your Windows 10 workstation “
    - You can do this by typing secpol.msc at a search/run/command prompt.
    - Under Local Policies/Security Options navigate to â€œUser Account Control Admin Approval Mode for the Built-in Administrator account
    - Set the policy to Enabled
If using Classic Menu
- Add Network
- Add Run Command
- LEAVE Highlight new programs checked.
Backgound of pictures
Change Folder Options - View … Options … Change Folder and Search Options … Vies Tab
- Make details view default folder view
- Display full path in title bar
- Show Hidden Files Folders and Drives
- Uncheck Hide Empty Drives
- Uncheck Hide Exensions for known ¦
- Uncheck Hide folder merge conflicts
- Uncheck Hide Protected Operating System Files
- Apply
- Apply to Folders
Set: Google.com as home page
Add Favorites to Windows Explorer

Network Configuration

Setup DHCP in ServerDC001.	Reserve IP for computer based on Machine name MachineXXX ⇒ 10.230.1.XXX
Reference only	DNS Default for All domainname Employees Gateway: 1 DNS 2 OpenDNS Primary Dns 208.67.222.222 OpenDNS Secondary Dns 208.67.220.220 DNS (FDN) Gateway: 1 2 9 11

Printers

Where	Printer	Port	Comment
All	HP Laserjet 8000 PCL	Local TCP/IP 1	Windows Update Select: HP Universal Printing PCL 6 (Windows Update Select: HP - laserjet 8000 PCL5: Did not Work )

Change Advanced Sharing Settings for Domain

leave and turn off homegroup
Turn on file and printer sharing on Domain and Private
Use user accounts and passwords to connect
Turn off media streaming in all networks* Turn on Network Discovery
Turn on 128-bit encryption

Software

Listing of all software some may not be installed depending on user needs	Ninite.con Chrome Runtimes Silverlight Air Java Java 64 Shockwave Greenshot 7-Zip .Net Adobe Reader Adobe Acrobat Beyond Compare scn2-DiskSpaceScanner or J Goodies Disk Report Microsoft Project (Some) Publisher (Some) wiki.domain.com Adobe Flash Projector Software

Disable Notifications for Firewall off

2019-04-16

Turn off Firewall notifications

We've had luck with this setting in group policy:

Computer Configuration - Administrative Templates 
                       - Windows Components - Windows Security 
                       - Notifications - Hide all notifications
I can confirm this works, you *have* to update your central store to the 1809 admin templates:

https://support.microsoft.com/en-gb/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra

cheers

Wednesday, January 23, 2019 5:32 P

https://social.technet.microsoft.com/Forums/en-US/01f5f02d-a422-46c6-b7d5-9d02de119659/build-1809-firewall-windows-defender-security-center-notification?forum=win10itprosecurity

Powercfg

10/27/2017 Use powercfg.exe to control power plans - also called power schemes - to use the available sleep states, to control the power states of individual devices, and to analyze the system for common energy-efficiency and battery-life problems.

https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/powercfg-command-line-options

Conference Room Computers

User
- Sign on
- Google chrome default
- Office Setup
- Software they use start once
- Proxy off
- Screen Saver
- Default Printer
- Start expose all shortcuts
- Video Conferencing

Table of Contents