Laptop Setup

Step-by-Step Setup:

1. First Login:

• Log in to the computer, open Computer Setup Checklist from G drive. Fill out basic PC info.
• Ensure the computer is encrypted with BitLocker.
  • Check BitLocker status via C drive or command prompt
    1. Run CMD as admin
       1. manage-bde -on C:
       2. manage-bde -status
• Rename the PC to the desired name. Get from request spreadsheet, check both AD and Lansweeper to see if name already exists
  • “View your PC name” from start. Rename and restart
1. Sophos VPN 
   • Open “Sophos Endpoint Agent” from start, ensure device is protected
   • Open “Sophos Connect” from start to verify app is installed
     • Make sure most up-to-date sophosSSLVPNduo.pro file is located in the Sophos folder on the C drive
2. OU in AD
   • Find newly named PC in BitLockerTest OU in AD
     • Right click and move PC to correct OU
     • Open CMD prompt as admin in the PC you are setting up and run gpupdate /force
3. Windows Update:
   • Check Windows version, make sure it is 22H2 or greater. If the version is outdated (21H2), request to add the computer to the upgrade group from an engineer, or upgrade from web
4. Dell Command Update - MAKE SURE LAPTOP IS PLUGGED INTO DOCK TO PULL DOCK DRIVERS
   • Run “Dell Command | Update” from start menu as Admin.
   • Once open, go to settings, and enter the master BIOS password. Procceed with OK and install required updates
5. Open Computer Management -> Local Users and Groups -> Groups -> Administrators -> Add Account Operators based on bank.
   •  FFLaccountoperators for all non affiliate banks.
   • FMBaccountoperators for FMB, WARaccountoperators for Warsaw, etc.
6. Device Manager
   • Open device manager and verify no errors.
     • If there are errors, right click on the driver(s) needing updated and “update driver”
     • Select “Browse my computer for drivers” and install necessary drivers based off device model from \\wlkwsccm02\drivers\
7. Network Configuration:
   • Disable IPv6 and power management settings for ALL network adapters.

9. Ensure windows is active
   • Search “Activation settings” from start

9. Software Center
   • Install “Office 365 FMHC Current Channel” to install MS Office
   • Install “FMHC Wireless Profile” for Wi-Fi in Lakewood and Westlake offices for laptops only
10.  Test Apps
    • Launch Nautilus Unity Client, verify no errors
    • Launch Encompass from the Applications folder on the desktop, enter client ID BE11354300 and ensure program starts (BE11354300)
11. Final apps to install
    • Verify all applications / software is installed that was requested on the Useradd sheet. 
      • Ex. Adobe, Prologue, CutePDF writer, Greenshot, Diligent, Oracle, etc.
12.  User Setup
    • Login as the users account to build profile.
      • Uncheck the box in AD to have user "change password at next login."
      • Once logged in, launch Outlook
      • Unpin generic mail icon from task bar, unpin Microsoft store from task bar
    • Open Sophos Connect and import connection from C drive.
      • Test VPN with users credentials on external hotspot.
    • Once done, check back the box in AD to change password at next login
    • Restart Computer

Done!