-- MikeGore - 2015-10-22

Immediately Post-Imaging

IMPORTANT

• MAKE SURE YOU TURN OFF ACHI IN THE BIOS

Windows

• Do NOT restart the computer except where noted

Perform Initial Setup

1. Boot, Windows will perform first run setup, may take a while (will install drivers)
2. Will then reboot
3. Windows' Set Up Windows wizard will appear
   • Page One:
     • Country or region: Canada, Time and Currency: English(Canada), Keyboard Layout:US (Leave all as defaults)
       • -> Next
   • Page Two:
     • Username: Temp (the userid will be deleted later on)
     • Computer name: eg: rsg-pc070 -> Next
   • Page three:
     • Password: use cscf-op or cscf-adm password
     • Hint: "2015 cscf-op" (or whatever is relevant)
   • Page Four:
     • Accept the license -> Next
   • Page Five:
     • Install Important Updates Only
   • Page Six:
     • Set Time zone: UTC-05:00 Eastern Time (US & Canada)
     • Check box: Automatically adjust clock for daylight savings time
     • Check Date/Time: Adjust if necessary -> Next
   • Page Seven: (Only if Wireless card present)
     • If asked about connecting to a wireless network -> Click Skip
   • Page Seven / Seven.One:
     • Select Work Network
   • Setup Will continue after restarting

Activate Windows and Office

*BEFORE ACTIVATION PLEASE DO THE FOLLOWING*
1. Go to Control Panel -> Network and Internet -> Network and Sharing Center
2. Click on Local Area Connection 2
3. Click on Properties
4. Click Internet Protocol Version 4(TCP /IPv4) and then Properties.
5. In the General Tab click "Advanced..."
6. Now in the DNS tab, in the Append these DNS suffixes(in order): box, add "uwaterloo.ca"
7. Click OK

1. Activate Windows
   • Try first to activate automatically
     • If Asked on boot
       • Click Activate Now
       • Click Activate Windows online now
       • Click close
     • Otherwise
       • Start -> Control Panel -> System and Security -> System
       • At the bottom, Click the link to Activate Windows
       • Click Activate Windows online now
       • Click close
   • If windows 7 will NOT activate we will switch to the Sampus Key Server
     • Switch to the Campus Key server
       • Access the licenses file (access restricted to CSCF staff)
         • Start Menu -> Search \\asimov\images (use cscf-adm or cscf-op user with 2014 password when prompted)
         • File: SITE_LICENSES/licenses.txt
       • Look for the section Windows 7 Enterprise x32 and x64 using Campus Key Management Servers
       • Open and Administrative Command Prompt
         • Start Menu -> Accessories -> Right Click on Command Prompt -> Run As Administrator
         • slmgr.vbs /ipk XXXXX-XXXXX-XXXXX-XXXXX-XXXXX (replace XXXX... with the license key from the licenses.txt file)
2. Activate Office
   • Open Microsoft Word
   • Click OK
   • Install Update Only
   • File -> Help -> Activate
     • See: MicrosoftOfficeLicenseKey

Correct Hardware Detection Problems

1. If Screen resolution is too low (Looks really bad)
   • Start -> Control Panel -> Adjust Screen Resolution
   • Change resolution to the highest one -> click apply
   • Windows will change the resolution and ask if you want to keep it:
     • If the screen goes black, wait 15 seconds
       • Try the next highest and repeat
     • If the box shows up, and the lettering looks normal -> Click "Keep Changes"
       • If the lettering looks funny (out of proportion) try the next highest and repeat
   • CLose the Control Panel

Update Software

1. If at any point Windows Update pops up a box in the lower right asking to restart the computer
   • change 10 minutes to 4 hours, click postpone
2. If Java Updater Requests permission
   • Click Yes
   • When the balloon appears on the Java icon click it
   • Click Install
   • Click Install (Again!)
   • Wait a few minutes for Java to install
   • If it asks about install Extras (e.g. Ask Toolbar)
     • Uncheck the Box marked install
     • Click Next
   • Java will now install, wait patiently
   • Click Close

Finish With Windows Update And Clean Up

1. Windows Update may appear asking to restart
   • Click Restart now
   • Wait patiently while the computer restarts
     • Note: If the Force close option comes up listing Windows Update, wait, it will close on its own
2. If Windows Update does not appear (if it has not shown up after about five minutes, it's not going to), then log out
   • Click Start
   • Hover over the arrow next to shutdown
   • Click Log out
3. Windows may reboot several times
4. Windows will show to the login screen
   • Login as either cscf-op or cscf-admin
5. Delete the Temp account
   • Open Start -> Control Panel -> User Accounts and Family Safety -> Add or remove user accounts
   • Click on Temp
   • Click Delete the account -> Delete Files -> Delete Account
   • Close the Control Panel
6. Shutdown the computer or reboot into Linux (Done!)

Linux

Boot Computer And Log In

1. Boot the Computer
   • Windows Bootloader choose Ubuntu 14.04 LTS
   • GRUB Choose first Ubuntu option
2. Will present you with a login screen, log in as either cscf-op or cscf-adm using 2015 password

Set Hostname

1. Press Ctrl+Alt+T to open a terminal
2. Type "sudo vim /etc/hostname", press enter
3. Enter the same password you used to log in
4. change scspcxxx to final name
   • Example: scspc123, or rsg-pc123
5. Type "sudo vim /etc/hosts", press enter
6. change scspcxxx to final name
   • Example: scspc123, or rsg-pc123

Email

• OPTIONAL: Only needed if you wish to send out alert notices

1. dpkg-reconfigure postfix
   • update name to final computer name
   • See: Postfix Setup Notes

SSH"> Fix SSH

Optional

1. As root
   • rm /etc/ssh/*key*
2. dpkg-reconfigure openssh-server

Finish

1. Shutdown the Computer
   • Settings / Power Menu (Top right) -> Shutdown -> Shutdown

Before Deploying for a known userid

Windows

For use in AD

1. Add user to local Administrators group as cscf-adm

For use not in AD

1. login as an administrator
2. create a new user, make them an Administrator
   • assign a random password

Linux

AD setup

Initial setup Join to AD

1. Run see join-ad script

final AD setup

Optional - only when restricting to specific network access to users or groups

1. Note: the join-ad script will always add %staff_cscf to the suders file if it is not already there.
2. vi /etc/security/access.conf and add user (or users_groupname)
3. vi /etc/sudoers and add user (and, possibly, admin_groupname)

update

1. apt-get update && apt-get dist-upgrade
   • when queried, do not replace the LDAP/common-auth !
   • smb.conf - it will ask for a newer version - don't do it!

Setup networking

1. ONA

update inventory

1. remove old machines and equipment
2. add new machine

-- DennisBellinger - 25 Jun 2012