Laptop General Setup

This guide outlines the steps for preparing a laptop for general ICS use.

UEFI/BIOS Notes

General things to check and set…

For most Dell based systems, it's usually F2 on Dell systems (remember to use the fn key, if needed, on laptops!)

  1. Secure Boot enabled
  2. Storage > SMART Reporting > Enable (turn it on)
  3. Integrated NIC (in Network Controller Configuration) > set to Enabled only (as in disable PXE). Normally don't want PXE booting for security reasons outside of an already deployed system.
  4. Set Admin Password for UEFI/BIOS. See fellow Computing Support member for current password.
  5. System Management > Asset Tag > if campus purchased/owned, set to and double check spelling: University of California Irvine
  6. Wake on LAN > set to LAN Only
  7. Pre-boot behavior > Fastboot > set to Auto

Windows 10 OOBE (Out of Box Experience) First Time Boot and Setup

DO NOT CONNECT TO THE INTERNET until after completing the entire OOBE process! This is so that you're able to create a local account. Otherwise, connect to the internet if setting up a Microsoft account for login use to the system.

  1. set name/username to: support
  2. password: (refer to LastPass, group password manager, or ask a fellow administrator) …input and double check the password carefully!
  3. For the security questions, I usually do UCI themed answers. So, for example…
    1. What's the name of your pet?
      1. Peter
    2. What's the name of the city where you were born?
      1. Irvine
    3. What was your childhood nickname?
      1. Zot Zot
        1. (for Peter the Anteater)
  4. Privacy settings preferences
    1. I usually disable all but leave “Location” and “Find my device” enabled
  5. Skip Cortana setup, unless specifically asked to use it
  6. Support and Protection (usually Dell laptops) > can leave blank and press Next. Then uncheck “Use my information to register my security subscription, …”

After Windows 10 OOBE and finally finished loading to the desktop screen

  1. Add user account (loaner laptops user is kaylab) and department account if needed.
  2. Rename computer
  3. Connect to internet
  4. Copy BigFix, Office, Acrobat, Chrome, Firefox, VPN, Zoom and Thunderbird if needed for USB drive.
  5. Run installations
  6. optional: to disable auto-start of Microsoft Teams, look for the Teams icon in the taskbar tray, right click it and look for a way to uncheck the auto-start it in the Settings
  7. check for updates
  8. Go into BigFix and install FireEye and Bomgar
  9. Restart

BitLocker

  1. from the Start menu, search for BitLocker or Manage BitLocker
  2. select Turn on BitLocker
  3. select Save to a file
  4. save to a USB drive, if needed, but usually prefix what's already in the file name with the computer name (or hopefully the computer name has the serial number or service tag)
  5. after successfully saving, select Next, and Activate BitLocker
  6. Upload a copy to the SharePoint location:
     https://ucirvine.sharepoint.com/:f:/r/sites/ICS-Computing-Team/Shared%20Documents/BitLocker?csf=1&web=1&e=AdQtSB 

Laptop Imaging

laptop_setups.txt · Last modified: 2022/04/11 10:59 by luciad
CC Attribution-Noncommercial-Share Alike 4.0 International
Driven by DokuWiki Recent changes RSS feed Valid CSS Valid XHTML 1.0