• Network Configuration Database
  • Add Computer or Modify Information for new software install
  • If Os or Office product changes make note in Database
• Add folder in Machine Configuration
  • Add photos of machine and documentation to folder
• Create hanging File folder for printed documentation - font size 12
• Register machine with Manufacturer
  • HP Computers - Registration to ll@domain.com
  • for HP register Care Pack
• OS and Drivers
  • Install Windows 10
    • Accept Defaults on setup except for monitoring
    • Select create Organizational account then a Domain Account
    • UserName: domainname if need user to setup machine.
    • Password: domainpassword for server domainpassword
    • if need Hint: s
  • Drivers, Bios, IE Update
• Setup Initial User
  • UserName: domainname if need user to setup machine.
  • if necessary preferably not
    • windows Login: domainnamedomainname@hotmail.com
    • Email address for Windows Store: domainnamedomainname@hotmail.com
  • Activate machine Administrator account
  • Set machine Administrator's password to domainpassword default
  • Enable Administrator Account
• Machine Administrator
  • Login as Machine Administrator
  • Set Time
  • DO Later
    • Install ninite software
    • set Google Chrome as default
    • Pause updates for 7 days
    • See Change parameters and Clean Up
    • See Change User Profile Settings
    • See Change IE and Chrome Settings
    • also for Administrators Change User Profile Settings (Administrator Permissions)
    • Remove extra/un-needed programs
    • Add Feature ASP.net from Features in Progams
    • Wifi - Mobil Hotspot - Enable Remotely - Turn Off
    • uninstall - hp Client Security Manager
  • Turn off Autosetup in Newtwork Discovery (Private)
  • Turn on Public folder sharing in all networks
  • Delay Windows updates for 7 days
  • Change power scheme for never go to sleep; never turn off screen
  • Join domainname
• Network configuration:
  • See Network Configuration for DHCP Settings
  • Remove same named machines from Domain Controller
• Domain (admin)
  • Logon with domain/domainname (administrator) permissions
  • Turn on Service: “Functional Discovery Resource Publication” WSD
  • Function Discovery Provider Host
  • Function Discovery Resource Publication
  • SSDP Discovery
  • UPnP Device Host
  • Install beyondcompare for the software copy
  • copy 'Software for Workstations' to public…Downloads
  • Remove extra/un-needed programs
  • Install Software
  • Set Google Chrome as default
  • Add Ublock Origin and Extra
  • Disable Hibernation
  • HP Z2 G# - Delete Volume D:
  • If
    • commercial desktop or laptop use “hp image assistant” to update
    • for home use computer - use “HP support assistant”
  • PC Settings … System …….. Power and Sleep … when plugged in Never turn off monitor or go to sleep
  • PC Settings … Network & Internet … Ethernet … Click on Connector … Make this PC Discoverable Turn on
  • PC Settings … Network & Internet … Ethernet … Change Adapter Options … Turn power management off
  • PC Settings … Accounts ……… Sign-in options … Require sign-in when PC wakes from sleep
  • PC Settings … Time & Language … Eastern time zone … Adjust for Daylight saving … On
  • PC Settings … Update and Security … Windows Update … Advanced options … Notify to Schedule restart … give me updates for other Microsoft
  • PC Settings … Update and Security … Windows Update … Advanced options … Defer upgrades … Check on
  • PC Settings … Update and Security … Windows Update … Advanced options … Choose how updates are delivered … Updates from more than one place … On … PCs on my local network
  • PC Settings … Update and Security … Windows Defender … Real time … On …Cloud Based … On … Automatic Sample … On
  • If not already - Install Chrome
  • DO Later
    • See Change parameters and Clean Up
    • See Change User Profile Settings
    • See Change IE and Chrome Settings
    • also for Administrators Change User Profile Settings (domainname (administrator) Permissions)
  • Remove extra/un-needed programs
  • Turn off Firewall for the Work network and Domain SEE: Disable Notifications for Firewall off
  • See Changes Task Scheduler
• Permissions
  • Add Domain Users to Power Users
  • Add User to Administrators Security Group
• Domain user (firstname.lastname)
  • Logon with domainname/firstname.lastname
  • Turn on Service: “Functional Discovery Resource Publication” WSD
  • Install beyondcompare for the software copy
  • copy 'Software for Workstations' to public…Downloads
  • Remove extra/un-needed programs
  • Install Software
  • Set Google Chrome as default
  • Add Ublock Origin and Extra
  • Disable Hibernation
  • HP Z2 G# - Delete Volume D:
  • If
    • commercial desktop or laptop use “hp image assistant” to update
    • for home use computer - use “HP support assistant”
  • PC Settings … System …….. Power and Sleep … when plugged in Never turn off monitor or go to sleep
  • PC Settings … Network & Internet … Ethernet … Click on Connector … Make this PC Discoverable Turn on
  • PC Settings … Network & Internet … Ethernet … Change Adapter Options … Turn power management off
  • PC Settings … Accounts ……… Sign-in options … Require sign-in when PC wakes from sleep
  • PC Settings … Time & Language … Eastern time zone … Adjust for Daylight saving … On
  • PC Settings … Update and Security … Windows Update … Advanced options … Notify to Schedule restart … give me updates for other Microsoft
  • PC Settings … Update and Security … Windows Update … Advanced options … Defer upgrades … Check on
  • PC Settings … Update and Security … Windows Update … Advanced options … Choose how updates are delivered … Updates from more than one place … On … PCs on my local network
  • PC Settings … Update and Security … Windows Defender … Real time … On …Cloud Based … On … Automatic Sample … On
  • If not already - Install Chrome
  • DO Later
    • See Change parameters and Clean Up
    • See Change User Profile Settings
    • See Change IE and Chrome Settings
    • also for Administrators Change User Profile Settings (domainname (administrator) Permissions)
  • Remove extra/un-needed programs
  • Turn off Firewall for the Work network and Domain SEE: Disable Notifications for Firewall off
  • See Changes Task Scheduler
• See Installing Office. Configure Microsoft Office on Machine.
  • Set up Outlook. See Setting Up OutLook.
• Windows Updates - all Windows 10 updates
• IE Update to Whatever newest
• Shares - See Shares
• Printers - See Printers
• Software
  • For all machines see Software
  • For Workstations See Software for Drafting Machines
  • Update AntiVirus to current definitions.
  • Setup Backup GFI or Handy Backup Platinum 4 See: Setup Backup section in User Add to domainname
    • run as service and
    • use Machine user as Log On As account
    • and authorization for his workstation backup folder.
  • PC Settings … Update and Security … Backup … Add a drive Show all network locations ??????
• Activate
• Add shortcuts see Shortcuts
• Run Belarc and store in Machine Configuration for machine
• Clone Drive

• Do all windows updates
• Windows Updates - Check for updates
• Graphics Workstations - Set maximum and minimum virtual memory to 1.5 times actual memory
• Allow users to remotely connect
  • do not authorize anyone except Administrators
  • Check Allow connections only …
• Performance
  • on older computers - Stop fading and smooth scrolling
• Firewall
  • Private network: turn off
  • Domain network: turn off;
  • public network: turn on
• Load extra drivers
  • Chipset
  • Video
  • audio
• Check Power management on Network and wireless Card and turn off
• Disable wireless adapter on Desktops

• Check screen size to appropriate for user
• Reset power scheme Never,never, never
• Reset power scheme
  • Use default plan
    • Battery
      • Dim the display
      • Turn off display: default
      • Put to sleep: default
    • Plugged in
      • Full bright
      • Turn off display: Never
      • Put to sleep: Never
  • Advanced Power Settings (settings for power: Balanced)
    • powercfg /list
    • powercfg -EXPORT c:profil-alim.pow 381b4222-f694-41f0-9685-ff5bb260df2e
    • powercfg -EXPORT C:nom-de-fichier.pow
    • powercfg -SETACTIVE 9e8a06b8-19fa-430d-ba57-34c08fee489e
    • Select Change settings that are currently unavailable
    • Change settings
      • Require password on Wakeup Setting: Yes
      • Hard Disk:
        • battery default
        • power 300 (ssd do not change)
      • IE JavaScript: Maximum Performance
      • Desktop Background…Slide Show: Available
      • Wireless: Maximum Performance
      • Sleep
        • Laptop
          • After:
            • Battery: Whatever is set as Default
            • Plugged In: Never
          • Hybrid Sleep:
            • Battery: Off
            • Plugged In: Off
          • Hibernate:
            • Battery: Never
            • Plugged In: Never
          • Wake Timers:
            • Battery: Whatever is set as Default
            • Plugged In: Enable
        • Desktop
          • After: Never
          • Allow Hybrid Sleep : On
          • Hibernate: Never
          • Wake Timers: Enabled
      • USB Selective Suspend: Disabled
      • Intel Graphic settings … Graphic Power Plan … Balanced
      • PB and Lid
        • Laptop
          • Lid Close:
            • Battery: Hibernate
            • Plugged In: Hibernate
          • Power Button:
            • Battery: Shutdown
            • Plugged In: Shutdown
          • Sleep Button:
            • Battery: Shutdown
            • Plugged In: Do Nothing
        • Desktop
          • Power Button: Shutdown
          • Sleep Button: Do Nothing
      • PCI Express: OFF
      • Processor: Whatever is set as Default
      • Display
        • Laptop
          • Turn off:
            • Battery: Whatever is set as Default
            • Plugged In: Never
          • Display Brightness:
            • Battery: Whatever is set as Default
            • Plugged In: 100
          • Dimmed Display:
            • Battery: Whatever is set as Default
            • Plugged In: Whatever is set as Default
          • Adaptive Brightness:
            • Battery: Off
            • Plugged In: Off
        • Desktop
          • Turn off: Never
          • Enable adaptive brightness : Off
      • Multimedia
        • Sharing: Whatever is set as Default
        • Playing Video: Whatever is set as Default
      • Battery
        • Critical Action: Hibernate
        • Low Level: 12
        • Critical Level: 7
        • Low Battery Notification: On
        • Low Battery Action: Do nothing
        • Low Battery Level: 9
• Turn on numlock key
• Optional for new computers - Performance
  • On older computers - Stop fading and smooth scrolling
• PC Settings … Personalization … Themes … Theme Settings … Screen saver “domain” and 64 minutes … password protect
• Action Center - in Control Panel … System and Security … Security Maintenance … turnoff extraneous messages (like messages about firewall)
  • Change Action Center Settings
  • Remove unnecessary notifications
• PC Settings … Personalization … Themes … Theme Settings … Desktop Background … Background … Slideshow … C:\Windows\Web\Screen
• PC Settings … System … Tablet Mode … When I sign in go to the desktop
• PC Settings … Network & Internet … WiFi … Manage Wi-Fi Settings … Connect to suggested open hotspots … toggle the switch to Off.
• PC Settings … Network & Internet … WiFi … Manage Wi-Fi Settings … Connect to networks shared by my contacts … toggle the switch to Off.
• PC Settings … Network & Internet … WiFi … Manage Wi-Fi Settings … Paid WiFi Services … toggle the switch to Off.
• PC Settings … Network & Internet … Ethernet … Change Advanced Sharing Options … Turn on Network discovery … Turn on file and printer sharing … HomeGroup …Use user accounts
• PC Settings … Network & Internet … Proxy … Turn off automatic detection of proxy setup
• PC Settings … Network & Internet … Ethernet … Windows Firewall … Turn Off
• PC Settings … Privacy … General … Send Microsoft info about How I … Off
• PC Settings … Privacy … General … Manage my Microsoft advertising … Personalized ads in this browser … Off
• PC Settings … Privacy … Location … Location for this device is off
• PC Settings … Privacy … Speech, inking, & typing … Stop getting to know me (should show option “Get to Know Me”
• PC Settings … Privacy … Accounting info … Off
• PC Settings … Privacy … Other Devices … Sync with Devices … Off
• Action Center - in Control Panel … System and Security … Security Maintenance … turnoff extraneous messages (like messages about firewall)
• PC Settings … Devices … Let Windows Manage my Default Printer … Turn Off
• Menu Networks
• PC Settings … Personalization … Start … Choose which folders appear on start … File Explorer … Settings Documents … Downloads … Pictures … Network … Personal Folder
• Add favorite Network Places
  • Dropbox
  • Link to the machines configuration folder
  • Programfiles
• Check Recent Programs
• Performance
  • On Older PC's - Stop fading and smooth scrolling

• IE
  • Always open pop-up in new Tab
  • Change Intranet to On: Internet options… Security… Intranet… Sites… Uncheck “Automatically Detect Intranet Network”; then check three options below
    • See: http://stevenjwkennedy.wordpress.com/2009/03/25/automatically-detect-intranet-network/
  • Connections .. LAN settings … Uncheck “Automatically detect settings”
  • IE 11 May need - use software rendering instead of GPU rendering IE: Options .. Advanced … Check - Use software …..
  • Add Google as search

• Chrome
  • Open and skip login
  • Reopen and set size
  • Change the default search engine in Microsoft Edge
    • Enter the search engine’s website google.com
    • Select More actions (…)> Settings and then scroll down to select View advanced settings.
    • In the list under Search in the address bar with, choose Change
    • ???Select the website and then select Add as default.

• Startup tab
  • reeview and disable anything that is just not needed

• Office on start menu and quicklaunch
  • Word
  • Excel
  • Powerpoint
  • Outlook
• Others
  • Dropbox
  • SharedData
• Large Conference Room
  • Start Menu
  • Task Bar
  • Desktop
    • Dropbox

• In Addition to: Change User Profile Settings
• Change Administrator Security settings
  • Local security Policy
    • Navigate to your local security policy on your Windows 10 workstation “
      • You can do this by typing secpol.msc at a search/run/command prompt.
      • Under Local Policies/Security Options navigate to “User Account Control Admin Approval Mode for the Built-in Administrator account
      • Set the policy to Enabled
• If using Classic Menu
  • Add Network
  • Add Run Command
  • LEAVE Highlight new programs checked.
• Backgound of pictures
• Change Folder Options - View … Options … Change Folder and Search Options … Vies Tab
  • Make details view default folder view
  • Display full path in title bar
  • Show Hidden Files Folders and Drives
  • Uncheck Hide Empty Drives
  • Uncheck Hide Exensions for known ¦
  • Uncheck Hide folder merge conflicts
  • Uncheck Hide Protected Operating System Files
  • Apply
  • Apply to Folders
• Set: Google.com as home page
• Add Favorites to Windows Explorer

Change Advanced Sharing Settings for Domain

• leave and turn off homegroup
• Turn on file and printer sharing on Domain and Private
• Use user accounts and passwords to connect
• Turn off media streaming in all networks* Turn on Network Discovery
• Turn on 128-bit encryption

2019-04-16

Turn off Firewall notifications

We've had luck with this setting in group policy:

Computer Configuration - Administrative Templates 
                       - Windows Components - Windows Security 
                       - Notifications - Hide all notifications
I can confirm this works, you *have* to update your central store to the 1809 admin templates:

https://support.microsoft.com/en-gb/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra

cheers

Wednesday, January 23, 2019 5:32 P

https://social.technet.microsoft.com/Forums/en-US/01f5f02d-a422-46c6-b7d5-9d02de119659/build-1809-firewall-windows-defender-security-center-notification?forum=win10itprosecurity