-- MikeGore - 2017-03-14

Immediately Post-Imaging

Windows

Perform Initial Setup

• change hostname
  • Control panel -> System -> Advanced system settings (on the left) -> Computer Name - > Change

Activate Windows and Office

*BEFORE ACTIVATION PLEASE DO THE FOLLOWING*
1. Go to Control Panel -> Network and Internet -> Network and Sharing Center
2. Click on Local Area Connection 2
3. Click on Properties
4. Click Internet Protocol Version 4(TCP /IPv4) and then Properties.
5. In the General Tab click "Advanced..."
6. Now in the DNS tab, in the Append these DNS suffixes(in order): box, add "uwaterloo.ca"
7. Click OK

1. Activate Windows
   • Try first to activate automatically
     • If Asked on boot
       • Click Activate Now
       • Click Activate Windows online now
       • Click close
     • Otherwise
       • Start -> Control Panel -> System and Security -> System
       • At the bottom, Click the link to Activate Windows
       • Click Activate Windows online now
       • Click close
   • If windows 10 will NOT activate we will switch the key for the IST Key Server
     • • CSCF staff will have to do these steps
       • Access the licenses file (access restricted to CSCF staff)
         • Start Menu -> Search \\asimov\images (use cscf-adm or cscf-op user with 2014 password when prompted)
         • File: SITE_LICENSES/licenses.txt
       • Look for the section Windows 10 Enterprise x64 using Campus Key Management Servers
       • Open and Administrative Command Prompt
         • Start Menu -> Accessories -> Right Click on Command Prompt -> Run As Administrator
         • slmgr.vbs /ipk XXXXX-XXXXX-XXXXX-XXXXX-XXXXX (replace XXXX... with the license key from the licenses.txt file)
2. Activate Office
   • Open Microsoft Word
   • Click OK
   • Install Update Only
   • File -> Help -> Activate
     • See: MicrosoftOfficeLicenseKey

Update Software

1. If at any point Windows Update pops up a box in the lower right asking to restart the computer
   • change 10 minutes to 4 hours, click postpone
2. If Java Updater Requests permission
   • Click Yes
   • When the balloon appears on the Java icon click it
   • Click Install
   • Click Install (Again!)
   • Wait a few minutes for Java to install
   • If it asks about install Extras (e.g. Ask Toolbar)
     • Uncheck the Box marked install
     • Click Next
   • Java will now install, wait patiently
   • Click Close

Finish With Windows Update And Clean Up

1. Windows Update may appear asking to restart
   • Click Restart now
   • Wait patiently while the computer restarts
     • Note: If the Force close option comes up listing Windows Update, wait, it will close on its own
2. If Windows Update does not appear (if it has not shown up after about five minutes, it's not going to), then log out
   • Click Start
   • Hover over the arrow next to shutdown
   • Click Log out
3. Windows may reboot several times
4. Windows will show to the login screen
   • Login as either cscf-op or cscf-admin
5. Shutdown the computer or reboot into Linux (Done!)

Linux

Boot Computer And Log In

1. Boot the Computer
   • Windows Bootloader choose Ubuntu 14.04 LTS
   • GRUB Choose first Ubuntu option
2. Will present you with a login screen, log in as either cscf-op or cscf-adm using 2015 password

Set Hostname

1. Press Ctrl+Alt+T to open a terminal
2. Type "sudo vim /etc/hostname", press enter
3. Enter the same password you used to log in
4. change scspcxxx to final name
   • Example: scspc123, or rsg-pc123
5. Type "sudo vim /etc/hosts", press enter
6. change scspcxxx to final name
   • Example: scspc123, or rsg-pc123

Email

• OPTIONAL: Only needed if you wish to send out alert notices

1. dpkg-reconfigure postfix
   • update name to final computer name
   • See: Postfix Setup Notes

SSH"> Fix SSH

Optional

1. As root
   • rm /etc/ssh/*key*
2. dpkg-reconfigure openssh-server

Finish

1. Shutdown the Computer
   • Settings / Power Menu (Top right) -> Shutdown -> Shutdown

Before Deploying for a known userid

Windows

For use in AD

1. Add user to local Administrators group as cscf-adm

For use not in AD

1. login as an administrator
2. create a new user, make them an Administrator
   • assign a random password

Linux

AD setup

Initial setup Join to AD

1. Run see join-ad script

final AD setup

Optional - only when restricting to specific network access to users or groups

1. Note: the join-ad script will always add %staff_cscf to the suders file if it is not already there.
2. vi /etc/security/access.conf and add user (or users_groupname)
3. vi /etc/sudoers and add user (and, possibly, admin_groupname)

update

1. apt-get update && apt-get dist-upgrade
   • when queried, do not replace the LDAP/common-auth !
   • smb.conf - it will ask for a newer version - don't do it!

Setup networking

1. ONA

update inventory

1. remove old machines and equipment
2. add new machine