Marcus Hall

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Setup for a New Computer Windows 10 ======

  * Network Configuration Database
    * Add Computer or Modify Information for new software install
    * If Os or Office product changes make note in Database
  * Add folder in Machine Configuration
    * Add photos of machine and documentation to folder
  * Create hanging File folder for printed documentation - font size 12
  * Register machine with Manufacturer
    * HP Computers - Registration to ll@domain.com 
    * for HP register Care Pack
  * OS and Drivers
    * Install Windows 10
      * Accept Defaults on setup except for monitoring 
      * Select create Organizational account then a Domain Account
      * UserName: domainname if need user to setup machine.
      * Password: domainpassword  for server domainpassword 
      * if need Hint: s
    * Drivers, Bios, IE Update
  * Setup Initial User
    * UserName: domainname if need user to setup machine.
    * if necessary preferably not
      * windows Login: domainnamedomainname@hotmail.com
      * Email address for Windows Store: domainnamedomainname@hotmail.com
    * Activate machine Administrator account
    * Set machine Administrator's password to domainpassword default
    * Enable Administrator Account
  * Machine Administrator
    * Login as Machine Administrator
    * Set Time
    * DO Later
      * Install ninite software
      * set Google Chrome as default
      * Pause updates for 7 days
      * See **Change parameters and Clean Up**
      * See **Change User Profile Settings**
      * See **Change IE and Chrome Settings**
      * also for Administrators **Change User Profile Settings (Administrator Permissions)**
      * Remove extra/un-needed programs
      * Add Feature ASP.net from Features in Progams
      * Wifi - Mobil Hotspot - Enable Remotely - Turn Off
      * uninstall - hp Client Security Manager
    * Turn off Autosetup in Newtwork Discovery (Private)
    * Turn on Public folder sharing in all networks
    * Delay Windows updates for 7 days
    * Change power scheme for never go to sleep; never turn off screen
    * Join **domainname**
  * Network configuration:
    * See **Network Configuration** for DHCP Settings
    * Remove same named machines from Domain Controller
  * Domain (admin)
    * Logon with domain/domainname (administrator) permissions
    * Turn on Service: "Functional Discovery Resource Publication" WSD
    * Function Discovery Provider Host
    * Function Discovery Resource Publication
    * SSDP Discovery
    * UPnP Device Host
    * Install beyondcompare for the software copy
    * copy 'Software for Workstations' to public...Downloads
    * Remove extra/un-needed programs
    * Install Software
    * Set Google Chrome as default
    * Add Ublock Origin and Extra
    * Disable Hibernation
    * HP Z2 G# - Delete Volume D:
    * If 
      * commercial desktop or laptop use "hp image assistant" to update
      * for home use computer - use "HP support assistant"
    * PC Settings ... System ........ Power and Sleep ... when plugged in Never turn off monitor or go to sleep
    * PC Settings ... Network & Internet ... Ethernet ... Click on Connector ... Make this PC Discoverable Turn on
    * PC Settings ... Network & Internet ... Ethernet ... Change Adapter Options ... Turn power management off
    * PC Settings ... Accounts ......... Sign-in options ... Require sign-in when PC wakes from sleep
    * PC Settings ... Time & Language ... Eastern time zone ... Adjust for Daylight saving ... On
    * PC Settings ... Update and Security ... Windows Update ... Advanced options ... Notify to Schedule restart ... give me updates for other Microsoft
    * PC Settings ... Update and Security ... Windows Update ... Advanced options ... Defer upgrades ... Check on 
    * PC Settings ... Update and Security ... Windows Update ... Advanced options ... Choose how updates are delivered ... Updates from more than one place ... On ... PCs on my local network
    * PC Settings ... Update and Security ... Windows Defender ... Real time ... On ...Cloud Based ... On ... Automatic Sample ... On 
    * If not already - Install Chrome 
    * DO Later
      * See **Change parameters and Clean Up**
      * See **Change User Profile Settings**
      * See **Change IE and Chrome Settings**
      * also for Administrators **Change User Profile Settings (domainname (administrator) Permissions)**
    * Remove extra/un-needed programs
    * Turn off Firewall for the **Work** network and Domain SEE: Disable Notifications for Firewall off
    * See **Changes Task Scheduler**
  * Permissions
    * Add **Domain Users** to **Power Users**
    * Add User to **Administrators** Security Group 
  * Domain user (firstname.lastname)
    * Logon with domainname/firstname.lastname
    * Turn on Service: "Functional Discovery Resource Publication" WSD
    * Install beyondcompare for the software copy
    * copy 'Software for Workstations' to public...Downloads
    * Remove extra/un-needed programs
    * Install Software
    * Set Google Chrome as default
    * Add Ublock Origin and Extra
    * Disable Hibernation
    * HP Z2 G# - Delete Volume D:
    * If 
      * commercial desktop or laptop use "hp image assistant" to update
      * for home use computer - use "HP support assistant"
    * PC Settings ... System ........ Power and Sleep ... when plugged in Never turn off monitor or go to sleep
    * PC Settings ... Network & Internet ... Ethernet ... Click on Connector ... Make this PC Discoverable Turn on
    * PC Settings ... Network & Internet ... Ethernet ... Change Adapter Options ... Turn power management off
    * PC Settings ... Accounts ......... Sign-in options ... Require sign-in when PC wakes from sleep
    * PC Settings ... Time & Language ... Eastern time zone ... Adjust for Daylight saving ... On
    * PC Settings ... Update and Security ... Windows Update ... Advanced options ... Notify to Schedule restart ... give me updates for other Microsoft
    * PC Settings ... Update and Security ... Windows Update ... Advanced options ... Defer upgrades ... Check on 
    * PC Settings ... Update and Security ... Windows Update ... Advanced options ... Choose how updates are delivered ... Updates from more than one place ... On ... PCs on my local network
    * PC Settings ... Update and Security ... Windows Defender ... Real time ... On ...Cloud Based ... On ... Automatic Sample ... On 
    * If not already - Install Chrome 
    * DO Later
      * See **Change parameters and Clean Up**
      * See **Change User Profile Settings**
      * See **Change IE and Chrome Settings**
      * also for Administrators **Change User Profile Settings (domainname (administrator) Permissions)**
    * Remove extra/un-needed programs
    * Turn off Firewall for the **Work** network and Domain SEE: Disable Notifications for Firewall off
    * See **Changes Task Scheduler**
  * See Installing Office. Configure Microsoft Office on Machine.
    * Set up Outlook.   See Setting Up OutLook.
  * Windows Updates - all Windows 10 updates
  * IE Update to Whatever newest
  * Shares - See Shares
  * Printers - See Printers
  * Software
    * For all machines see Software
    * For Workstations See Software for Drafting Machines
    * Update AntiVirus to current definitions.
    * Setup Backup GFI or Handy Backup Platinum 4 See: Setup Backup section in [[Users:UserAdd:UserAddTodomainname|User Add to domainname]]
      *  run as service and
      * use Machine user as Log On As account
      * and authorization for his workstation backup folder.
    * PC Settings  ... Update and Security ... Backup ... Add a drive Show all network locations ?????? 
  * Activate
  * Add shortcuts see **Shortcuts**
  * Run Belarc and store in Machine Configuration for machine
  * Clone Drive


====== Change Parameters and Clean Up ======

  * Do all windows updates
  * Windows Updates - Check for updates
  * Graphics Workstations - Set maximum and minimum virtual memory to 1.5 times actual memory
  * Allow users to remotely connect
    * do not authorize anyone except Administrators
    * Check Allow connections only ...
  * Performance
    * on older computers - Stop fading and smooth scrolling
  * Firewall
    * Private network: turn off
    * Domain network: turn off;
    * public network: turn on
  * Load extra drivers
    * Chipset
    * Video
    * audio
  * Check Power management on Network and wireless Card and turn off
  * Disable wireless adapter on Desktops
 

====== Change User Profile Settings ======

  * Check screen size to appropriate for user
  * Reset power scheme Never,never, never
  * Reset power scheme
    * Use default plan
      * Battery
        *  Dim the display
        *  Turn off display: default
        *  Put to sleep: default
      * Plugged in
        *  Full bright
        *  Turn off display: Never
        *  Put to sleep: Never
    * Advanced Power Settings (settings for power: **Balanced**)
      * powercfg /list
      * powercfg -EXPORT c:profil-alim.pow 381b4222-f694-41f0-9685-ff5bb260df2e
      * powercfg -EXPORT C:nom-de-fichier.pow
      * powercfg -SETACTIVE 9e8a06b8-19fa-430d-ba57-34c08fee489e
      * **Select** Change settings that are currently unavailable 
      * Change settings
        * Require password on Wakeup Setting: Yes
        * Hard Disk:
          * battery default
          * power  300 (ssd do not change)
        * IE JavaScript: Maximum Performance
        * Desktop Background...Slide Show: Available
        * Wireless: Maximum Performance
        * Sleep
          * Laptop
            * After:
              * Battery: Whatever is set as Default
              * Plugged In: Never
            * Hybrid Sleep:
              * Battery: Off
              * Plugged In: Off
            * Hibernate:
              * Battery: Never
              * Plugged In: Never
            * Wake Timers:
              * Battery: Whatever is set as Default
              * Plugged In: Enable
          * Desktop
            * After: Never
            * Allow Hybrid Sleep : On
            * Hibernate: Never
            * Wake Timers: Enabled
        * USB Selective Suspend: Disabled
        * Intel Graphic settings ...  Graphic Power Plan ... Balanced
        * PB and Lid
          * Laptop
            * Lid Close:
              * Battery: Hibernate
              * Plugged In: Hibernate
            * Power Button:
              * Battery: Shutdown
              * Plugged In: Shutdown
            * Sleep Button:
              * Battery: Shutdown
              * Plugged In: Do Nothing
          * Desktop
            * Power Button: Shutdown
            * Sleep Button: Do Nothing
        * PCI Express: OFF
        * Processor: Whatever is set as Default
        * Display
          * Laptop
            * Turn off:
              * Battery: Whatever is set as Default
              * Plugged In: Never
            * Display Brightness:
              * Battery: Whatever is set as Default
              * Plugged In: 100
            * Dimmed Display:
              * Battery: Whatever is set as Default
              * Plugged In: Whatever is set as Default
            * Adaptive Brightness:
              * Battery: Off
              * Plugged In: Off
          * Desktop
            * Turn off: Never
            * Enable adaptive brightness : Off
        * Multimedia
          * Sharing: Whatever is set as Default
          * Playing Video: Whatever is set as Default
        * Battery
          * Critical Action: Hibernate
          * Low Level: 12
          * Critical Level: 7
          * Low Battery Notification: On
          * Low Battery Action: Do nothing
          * Low Battery Level: 9
  * Turn on numlock key
  * Optional for new computers - Performance
    * On older computers - Stop fading and smooth scrolling
  * PC Settings  ... Personalization ... Themes ... Theme Settings ... Screen saver "domain" and 64 minutes ... password protect
  * Action Center - in Control Panel ... System and Security ... Security Maintenance ... turnoff extraneous messages (like messages about firewall)
    * Change Action Center Settings
    * Remove unnecessary notifications
  * PC Settings  ... Personalization ... Themes ... Theme Settings ... Desktop Background ... Background ... Slideshow ... C:\Windows\Web\Screen
  * PC Settings  ... System ... Tablet Mode ... When I sign in go to the desktop
  * PC Settings  ... Network & Internet ... WiFi ... Manage Wi-Fi Settings ... Connect to suggested open hotspots ... toggle the switch to Off.
  * PC Settings  ... Network & Internet ... WiFi ... Manage Wi-Fi Settings ... Connect to networks shared by my contacts ... toggle the switch to Off.
  * PC Settings  ... Network & Internet ... WiFi ... Manage Wi-Fi Settings ... Paid WiFi Services ... toggle the switch to Off.
  * PC Settings  ... Network & Internet ... Ethernet ... Change Advanced Sharing Options ... Turn on Network discovery ... Turn on file and printer sharing ... HomeGroup ...Use user accounts
  * PC Settings  ... Network & Internet ... Proxy ... Turn off automatic detection of proxy setup
  * PC Settings  ... Network & Internet ... Ethernet ... Windows Firewall ... Turn Off
  * PC Settings  ... Privacy ... General ... Send Microsoft info about How I ... Off
  * PC Settings  ... Privacy ... General ... Manage my Microsoft advertising ... Personalized ads in this browser ... Off
  * PC Settings  ... Privacy ... Location ... Location for this device is off
  * PC Settings  ... Privacy ... Speech, inking, & typing ... Stop getting to know me (should show option "Get to Know Me"
  * PC Settings  ... Privacy ... Accounting info ... Off
  * PC Settings  ... Privacy ... Other Devices ... Sync with Devices ... Off
  * Action Center - in Control Panel ... System and Security ... Security Maintenance ... turnoff extraneous messages (like messages about firewall)
  * PC Settings  ... Devices ... Let Windows Manage my Default Printer ... Turn Off
  * Menu Networks
  * PC Settings  ... Personalization ... Start ... Choose which folders appear on start ... File Explorer ... Settings  Documents ... Downloads ... Pictures ... Network ... Personal Folder  
  * Add favorite **Network** Places
    * Dropbox
    * Link to the machines configuration folder
    * Programfiles
  * Check **Recent Programs**
  * Performance
    * On Older PC's - Stop fading and smooth scrolling
 

====== Change IE and Chrome Settings ======

 
  * IE
    * Always open pop-up in new **Tab**
    * Change Intranet to On: Internet options... Security... Intranet... Sites... **Uncheck** "Automatically Detect Intranet Network"; then check three options below
      *  See: http://stevenjwkennedy.wordpress.com/2009/03/25/automatically-detect-intranet-network/
    * Connections .. LAN settings ... Uncheck "Automatically detect settings"
    * IE 11 May need - use software rendering instead of GPU rendering IE: Options .. Advanced ... Check - Use software .....
    * Add Google as search
 

  * Chrome
    * Open and skip login
    * Reopen and set size
    * Change the default search engine in Microsoft Edge
      * Enter the search engineâ€™s website google.com
      * Select More actions (...)> Settings and then scroll down to select  View advanced settings. 
      * In the list under Search in the address bar with, choose  Change
      * ???Select the website and then select Add as default.
 

====== Changes to Task Scheduler ======

  * Startup tab
    * reeview and disable anything that is just not needed

====== Shortcuts ======

  * Office on start menu and quicklaunch
    * Word
    * Excel
    * Powerpoint
    * Outlook
  * Others 
    * Dropbox
    * SharedData
  * Large Conference Room
    * Start Menu
    * Task Bar
    * Desktop
      * Dropbox
 

====== Change User Profile Settings (Administrator Permissions) ======

  * In Addition to: Change User Profile Settings
  * Change Administrator Security settings
    * Local security Policy
      * Navigate to your local security policy on your Windows 10 workstation “ 
        * You can do this by typing secpol.msc at a search/run/command prompt.
        * Under Local Policies/Security Options navigate to â€œUser Account Control Admin Approval Mode for the Built-in Administrator account
        * Set the policy to Enabled
  * If using Classic Menu
    * Add Network
    * Add Run Command
    * LEAVE Highlight new programs checked.
  * Backgound of pictures
  * Change Folder Options - View ... Options ... Change Folder and Search Options ... Vies Tab
    * Make details view default folder view
    * Display full path in title bar
    * Show Hidden Files Folders and Drives
    * Uncheck Hide Empty Drives
    * Uncheck Hide Exensions for known ¦
    * Uncheck Hide folder merge conflicts
    * Uncheck Hide Protected Operating System Files
    * Apply
    * Apply to Folders
  * Set: Google.com as home page
  * Add Favorites to Windows Explorer
 



====== Network Configuration ======

^**Setup DHCP in ServerDC001.**| Reserve IP for computer based on Machine name MachineXXX => 10.230.1.XXX|
^  **Reference only**  |<WRAP>
DNS  Default for All domainname Employees

  * Gateway: 1
  * DNS 2
  * OpenDNS Primary Dns 208.67.222.222 
  * OpenDNS Secondary Dns 208.67.220.220 

DNS (FDN)

  * Gateway: 1
    * 2
    * 9
    * 11


</WRAP>| 

====== Printers ======

^  Where^  Printer  ^  Port  ^  Comment  |
^  All|HP Laserjet 8000 PCL|Local TCP/IP **1**|<WRAP>Windows Update Select: HP Universal Printing PCL 6\\ (Windows Update Select: HP - laserjet 8000 PCL5: **Did not Work** ) </WRAP>|

====== Shares ======

Change Advanced Sharing Settings for Domain

  * leave and turn off homegroup
  * Turn on file and printer sharing on Domain and Private
  * Use user accounts and passwords to connect
  * Turn off media streaming in all networks* Turn on Network Discovery
  * Turn on 128-bit encryption

====== Software ======

^ Listing of all software\\ some may not be installed\\ depending on user needs |<WRAP>
  * Ninite.con
    * Chrome
    * Runtimes
      * Silverlight
      * Air
      * Java
      * Java 64
      * Shockwave
    * Greenshot
    * 7-Zip
    * .Net
    * Adobe Reader
  * Adobe Acrobat
  * Beyond Compare
  *  scn2-DiskSpaceScanner or J Goodies Disk Report
  * Microsoft Project (Some)
  * Publisher (Some)
  * wiki.domain.com
  * Adobe Flash
  *  Projector Software
</WRAP>| 
 


====== Disable Notifications for Firewall off ======


2019-04-16

<code>
Turn off Firewall notifications

We've had luck with this setting in group policy:

Computer Configuration - Administrative Templates 
                       - Windows Components - Windows Security 
                       - Notifications - Hide all notifications
I can confirm this works, you *have* to update your central store to the 1809 admin templates:

</code>

https://support.microsoft.com/en-gb/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra

cheers


Wednesday, January 23, 2019 5:32 P


https://social.technet.microsoft.com/Forums/en-US/01f5f02d-a422-46c6-b7d5-9d02de119659/build-1809-firewall-windows-defender-security-center-notification?forum=win10itprosecurity

====== Powercfg ======


<WRAP center round box >
10/27/2017
Use powercfg.exe to control power plans - also called power schemes - to use the available sleep states, to control the power states of individual devices, and to analyze the system for common energy-efficiency and battery-life problems.

https://docs.microsoft.com/en-us/windows-hardware/design/device-experiences/powercfg-command-line-options 

</WRAP>





====== Conference Room Computers ======

<WRAP center round box >
    * User
      * Sign on
      * Google chrome default
      * Office Setup 
      * Software they use start once
      * Proxy off
      * Screen Saver
      * Default Printer
      * Start expose all shortcuts
      * Video Conferencing


</WRAP>