Outreach Information Services

System Setup Checklist - PC

(LOS) = Items in \\NAS\OIS\ListofSoftware
Clean Install Setup

 

If not installing from scratch

  • Check BIOS to make sure that the VT asset tag is stored in the BIOS. If not either set in BIOS on asset screen (newer computers) or use the boot CD or Floppy to set the value using the ASSET.COM program (older computers)
  • Check BIOS to make sure that "Wake on LAN" is enabled
  • Check BIOS to make sure that Acoustic Setting for the hard drive is set to "Performance" (usually only applies to laptops and newer desktop computers)
  • Install OS. Rename computer to WWWXXXXX where “WWW” is the owner department’s initials and XXXXXX is the VT property number. When asked to set up a default user account, enter in “virginia tech” as temporary account.
  • Rename administrator to "erwin" and make sure that the accounts is disabled, and then log off.
  • Log on as erwin , and then Delete "virginia tech" profiles(right click on My Computer -> Properties -> Advance settings -> User profile), as well as virginia tech account (right click on My Computer->Manage, and select Local Users and Groups -> Users).
  • Install drivers in the order they are numbered from \\oia.vt.edu\ois\Software\Dell Drivers. OIS full time staff will ensure latest drivers are available and properly numbered. If the model/OS you need is not present, please check with one of them.
  • Delete the following folders if present:
    • C:\Dell
    • C:\Intel
    • C:\PerfLogs
  • Set OIS DNS settings(Primary: 198.82.181.219  Secondary: 198.82.152.40 Tertiary: 198.82.173.24) for ALL NIC and WNIC cards
  • Disable IP6 on all network devices including wireless
  • Uninstall Windows Components by going to Add/Remove Programs--> Windows Components
    • [XP] Windows Messenger & MSN Explorer
    • [VISTA/Win7] Tablet PC Optional Component & Windows Meeting Space
  •  Add “Authenticated Users” to the “Network Configuration Operators” group under Manage Computers -> Local Users and Groups -> Groups
  •  [VISTA/Win7] Register Vista MAK SN (Right click “Computer”, go to “Properties”, scroll down to find “Windows Authentication”)
  • [VISTA/Win7] Update Windows Experience Index
  • Install Office 2007. Do a Custom Install and set the following to “Not available”: Groove, InfoPath, and OneNote. Publisher can also be set to “Not available” unless the user is already using a previous version or requests it (only needed if not installing from OIS image).
  • Enable Microsoft Updates (i.e. – NOT just windows Updates. This will ensure that it also gets MS Office updates)
  • Run Microsoft Update. In addition to critical items, install all optional items. Repeat until all critical and optional items are installed.
  • [Vista] Run rating Window Experience Index.
  • Set the password for the erwin account (right click on My Computer->Manage, and select Local Users and Groups -> Users).
  • Join to Domain if computer is going to be on domain
  • Install Kaseya agent (https://www.ois.outreach.vt.edu/dl.asp) using Internet Explorer. Choose appropriate installer and click "Run From" and the reboot ... DO NOT "SAVE" or "SAVE AS"!
  • Enable Remote Desktop
  • Check Power Settings to make sure that "Never sleep when plugged in" is enabled.
  • Install/update Symantec Endpoint Protection
  • Install Retrospect Remote (Do NOT update firewall settings) if computer is to be backed up.
  • Acrobat/Cute PDF:
    • If advanced PDF editing abilities are not required, install/update latest reader and install Cute PDF. Otherwise install/Update Acrobat Pro (version determined by license availability).
    • Run an "update/upgrade" check from Help menu until all updates are installed

If you installed from an image, the following steps may be omitted but be sure to check that latest versions of all application are present.

  • Install/update Sun Java. Disable Java from auto-checking for updates (except on OIS systems).
  • Install/Update Firefox (LOS)
  • Install/Update Flash and Shockwave for IE
  • Install/Update Flash and Shockwave for Firefox
  • [XP] Make sure the login text is added (LOS vbs file)
  • Add VT Certs into their systems. Go to http://computing.vt.edu/security_and_viruses/certificates/index.html#rootcert and follow instructions for IE and Firefox. NOTE: Firefox must be installed on a per-user basis
  • Install/Update Real Player Alternative
  • Install/Update Quick Time
  • Install OIA set IP Tool (Only Laptop)

 

Firewall Rules

Firewall rules can be applied by either running the "Configure OIA Firewall" script in Kaseya or configuring entries manually. If configuring manually, entries are:

  • Modify Firewall settings to be the following:
    • Remote Desktop should be port 3389 TCP and enabled to CUSTOM, and copy-paste the "custom exception settings" from LOS
    • Add a port, call it "Kaseya", and make it 5721 TCP and enabled to CUSTOM, and copy-paste the "custom exception settings" from LOS
    • Enable File Sharing (TCP139, TCP445, UDP137, UDP138), make it CUSTOM for every single entry, and copy-paste the "custom exception settings" from LOS
    • Add port, call it “Retrospect”, and make it 497 TCP and enabled to CUSTOM, and copy-paste the "custom exception settings" from LOS
    • Uncheck any other firewall exceptions if present

Kaseya Tasks

  • Install User State
  • Apply OIS Power Settings (unless user has preferred settings)
  • Setup in Kaseya to defrag HDD
  • Pre-install VNC (XP)/K-VNC (Vista)