CREATING A WINDOWS WORKSTATION BASE IMAGE - WINXP
30Aug2006 - Some of this is out of date please verify and fix
Notes: These instructions are for creating a base OS image.
Very little modifications are done, mainly just securing the system.
This image is the base for Nexus, grad workstations, and staff workstations.
Install OS
- Delete all partitions on hard drive.
- Install OS on a new 3gig. NTFS partition.
- Use UofW license number for base image (sysprep.inf will be used during install of sysprepd image, it will contain license number).
- For Name/Organization, use School of Computer Science/University of Waterloo.
- Correct regional settings (time, time zone, date, etc).
- When prompted to supply user names, for user #1, create CSCF-adm
Modify System
Device Drivers
- After the computer has rebooted and comes up with a desktop, ensure you are logged in as CSCF-adm (select Start, on top of window that appears, username is listed)
- Press CTRL-ALT-DEL and change blank password to standard password
- Run the Device Manager to see what device drivers are needed (run:devmgmt.msc)
- Install all needed device drivers.
- Once that has been setup, reboot machine
Networking
- Use temporary name and ip and configure system (networking will be changed just before creating image file)
- For DNS, use 129.97.152.100, 129.97.152.10 The Campus DNS won't resolve our Active Directory names (SRV records).
- In the General tab, ensure show icon in notification area when connected is checked.
OS Updates/Patches
- Using private vlan or cd, install all needed OS patches and updates before going onto the campus network.
- Reboot as directed
Modify Control Panals
- Change log in method so username and password are required
- Open the Control Panal and select Classic View
Internet Options
- Select Internet Options and change Home Page to www.uwaterloo.ca
- Select OK and return to Control Panel
User Accounts
- Select User accounts, and from the listed tasks, choose Change the way users log on and off
- Uncheck Use the Welcome screen
- Use Fast User Switching should automatically uncheck itself
- Apply changes and then return to Control Panel.
- Go to My Computer and right click and select Manage
- From the management console, select USERS/GROUPS
- Highlight the administrator account and change password to blank/null This will make using a sysprep.inf easier for use.
Taskbar and Start Menu
- Select Taskbar and Start Menu
- Uncheck Group similar taskbar buttons
- Check Show Quick Launch
- Uncheck Hide inactive icons
- Select Start Menu tab and check Classic Start Menu
- Select OK and return to Control Panel
System
- Select System and go to the Remote tab
- Make sure Remote Assistance and Remote Desktop are unchecked (disabled).
- Select OK and return to Control Panel
Folder Options
- Select Folder Options and choose View tab
- On the Advanced settings: window, scroll to the very bottom and uncheck Use simple file sharing
- Select OK and return to Control Panel.
- Select Administrative Tools and choose Event Viewer
- Select each event type (Application, Security and System) and change properties so that the log size is 10 megs instead of 512 KB and that events are overwritten as needed.
- Return to Control Panel
Default Printer
- Select Printers and faxes and choose Add Printer
- Create a Local Printer
- In the Ports list, scroll down and select FILE
- For a driver: select Apple Laserwriter 16/600PS
- Printer Name: Print to a Postscript File
- Do not share the printer
- Do not print a test page
- Once the print queue is created, select the printers properties and install duplex printing on the Device Settings Tab.
- Return to Control Panel
- Close Control Panal
Set Network Time Server
- From a command prompt or the RUN command, change the time server by using the following command: set net time /setsntp:ntp.cs.uwaterloo.ca
- Close command prompt window
File System Additions
- Create a directory called software in the root of the system drive
- Set permissions so that:
- administrators = full control
- creator/owner = full control
- system = full control
- Create subdirectory \i386 and copy files from installation medias \i386 directory
- Enter the following < > into registry, this will re-direct system to look in c:\software\i386
- Create a directory called temp in the root of the system drive
- Set permissions so that:
- administrators = full control
- creator/owner = full control
- system = full control
Reboot machine.
SYSPREP PROCESS