| Author | Messages | |
robertsingers
Posts:571
 | | 11/25/2009 2:37 AM |
| Don't worry too much Susan, there's no UAC in XP Mode anyway 
From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Susan Bradley
Sent: Wednesday, 25 November 2009 3:31 p.m.
To: activedir@mail.activedir.org
Subject: Re: {Fraud?} {Disarmed} RE: [ActiveDir] Windows 7 setup directions
Change User Account Settings (UAC) to Never Notify - Start - UAC - Slide bar down to Never Notify.
RANT MODE PRE HOLIDAY SEASON APOLOGIES IN ADVANCE
Please please please do not do this. Win7 takes it down to where you don't see UACs much at all anyway and now you want to shut it off.
When you do see it, you need to see it now. And while it is there/was there to beat our line of business apps into submission to code without administrator rights you are deploying a modern OS.
Leave it at the lower than the top value, but please do not turn it off like this.
You can turn it off on a server. You can turn on IE ESC on a server, but on a desktop DO NOT turn it off. It's time we started deploying OSs securely and appropriately and this my current pet peeve.
I run Vista here 24/7 and other than the times I install software (which is rare after the first install) I never see UAC.
Also is this deployment 32 or 64 bit? We're making the move to 64bit in this hardware refresh. Stand up a box, see if your apps will make the jump from 32 to 64. The memory gains are worth it.
Robert Singers wrote:
Then all you standard applications use Installshield and won't install on Windows 7 so you have to download "XP Mode" and run them all on XP anyway.
From: activedir-owner@mail.activedir.org<mailto:activedir-owner@mail.activedir.org> [mailto:activedir-owner@mail.activedir.org] On Behalf Of Susan Bradley
Sent: Wednesday, 25 November 2009 2:51 p.m.
To: activedir@mail.activedir.org<mailto:activedir@mail.activedir.org>
Subject: Re: {Fraud?} {Disarmed} RE: [ActiveDir] Windows 7 setup directions
....no no no... you go to the MVLS web site and download the Win7 from the site and get the KMS key. You then start deploying at which time you realize that you aren't doing KMS deployments but MAK deployments and you need to go back to the MVLS web site and get the right key.
You then have to call into Microsoft to get a new KMS key since you just messed up your KMS deployment server.
Gabriele Scolaro wrote:
I am sorry, I just read up to step 3 and no further because I realized it would not work... the CD was not pulled out of its plastic case and the computer was not switched on....
Don't get it hard just kidding - Gabriele.
From: activedir-owner@mail.activedir.org<mailto:activedir-owner@mail.activedir.org> [mailto:activedir-owner@mail.activedir.org] On Behalf Of David W. McSpadden
Sent: martedì 24 novembre 2009 3:33
To: NT System Admin Issues
Cc: activedir@mail.activedir.org<mailto:activedir@mail.activedir.org>
Subject: [ActiveDir] Windows 7 setup directions
Anyone care to review and tell me what you might do differently and why?
We will image and deploy after we have all the bugs knocked out.
1. Boot from a Windows 7 CD.
1. At the Language to Install screen, make sure English, English and US are in the 3 fields and press <Next>.
1. Press <Install Now>.
1. Accept the license terms and press <Next>.
1. At the Which Type of Installation Do You Want, click Custom (Advanced).
1. At the Where Do You Want to Install Windows, click <Next>.
1. If you see a warning screen for a previous release of Windows installed, click <OK>.
1. After the system reboots, at the first Windows 7 Professional screen, type <Nunyabiznaz> in Type a User Name field. In the Computer Name field, enter W7xxmmyyserial# where xx is the department id, mmyy is the month and year of the workstation build and serial number is the last 6 characters of the serial number. Press <Next>.
1. At the Set a Password For Your Account screen, type the current password for <Nunyabiznaz> and press <Next>.
1. Click 'Use Recommended Settings'.
1. At the Date and Time screen, click the down arrow and highlight (UTC-5:00 Eastern Time US and Canada). Make sure the DST box is checked and that the date and time are correct and press <Next>.
1. At the Select Your Computer's Current Location screen, click Work Network.
1. Updates will automatically download. Click install to install updates
1. After the system reboots, log on as <Nunyabiznaz>.
1. Add Desktop Icons - Right click Desktop - Personalize - Change Desktop Icons - Check Computer, Network and Users Files - Apply and Ok.
1. Join IMCU.Local domain - Right click Computer - Properties - Advanced System Settings - Computer Name - Change - Check Domain and type in Imcu.local and click <Ok>. At the User name and password type Administrator and the current Administrator password.
1. Click Ok at the Welcome to Imcu.local screen and press <Ok> to Restart and Restart Now.
1. After the system reboots, log on as Administrator. Click <Switch User> and click <Other User>. Enter Im_Dom1\Administrator in the user name field and the current password for Administrator in the password field and hit <Enter>.
1. Add Desktop Icons - Right click Desktop - Personalize - Change Desktop Icons - Check Computer, Network and Users Files - Apply and Ok.
1. Change desktop to Classic View. Right click desktop - Personalize - Click on Windows Classic.
1. Change to Classic View for all users. Start - Run gpedit.msc - User Configuration - Administrative Templates - Control Panel - Personalization - Click on Load A Specific Theme - Click on Enabled and enter C:\Windows\Resources\Ease of Access Themes\classic.theme into the Path to theme file: box and click apply and OK. Click on For a specific visual style file or force Windows Class - Click on Enabled and click apply and OK.
1. Change User Account Settings (UAC) to Never Notify - Start - UAC - Slide bar down to Never Notify.
1. Change Wins and DNS settings: Right click Network - Properties - Change Adapter Settings - Right click Local Area Connection - Properties - Highlight Internet Protocol Version 4 - Properties - Advanced - DNS and Wins - Add the following entries:
10.0.50.205
10.0.90.205
10.0.10.5
1. Add Environment Variables - Right click Computer - Properties - Advanced System Settings - Advanced - Environment Variables - Click New under System Variables. Use the following variables:
Admin 10.0.50.205
Branch 10.0.50.205
DDW 10
Doc 25_Data
EDC 10.0.50.4
Exchange 10.0.50.4
Location Teller1
Mynode xx_tel_xx
OTG 10.0.50.18
Institution IN01
Production 10.0.50.8
1. Verify that there is a c:\tmp folder. If there is no tmp folder, create it.
1. Copy Q:\Cubemap.bat to a flash drive. Copy it to C:\tmp and execute it. You may have to click Ok to install printer drivers. You should now have the necessary network drives to install everything.
1. Copy G:\tmp\Workstation Build\*.* to C:\tmp. Click Yes to replace existing entries and check Do This for All xx Items,, if necessary.
1. Show all Hidden Files - Start - Control Panel - Click View By and highlight Small Icons - Folder Options - View - Check Show Hidden Files, Folders and Drives - Apply - Ok.
1. Create Cubemap shortcut on all users startup. Start - Right click All Programs - Open All Users - Double click Programs - Startup - Right click New - Shortcut - C:\tmp\Cubemap.bat
1. Copy Nautilus icons to all users desktop (Public Desktop). Copy from G:\Nautilus Scanning and G:\Nautilus Viewing. Double click Computer - C: drive - Users - Public - Public Desktop, paste to Public Desktop.
1. Create Guicam shortcut on Public Desktop to Q:\In01\Oper\Process\Guicam.bat. Change icon to q:\In01\oper\process\guicam.ico.
1. Add Enterprise Time Clock icons to Public Desktop from Q:\Enterprise eTime and Q:\Enterprise eTime Professional.
2. Create shortcut on public desktops: N:\Counterchecks\form.exe - rename Counter Checks.
1. Create shortcut on public desktops: N:\Loancoupons\form.exe - rename Loan Coupons.
1. Copy IMCU Intranet icon to Public Desktop - Q:\Intranet Home Page
1. Copy command prompt to all users Start menu. Copy from G:\Command Prompt. Click Start - Right click All Programs - Open All Users - Paste command prompt into the Start Menu folder on the right.
1. Add a Generic \ Text Only printer and call it Generic. Click Start - Devices and Printers - Add a Printer.
1. Install VNC from G:\VNC\V1.0.6\Ultravnc_1.0.6.4_setup. At the Ultravnc Server Property page, enter admin as the VNC password. Click Configure MS logon groups. At the unltravnc security editor, click add. Add _Data_Proc and click check names and then ok. Add Domain Admins and click check names and then ok. Click apply and then ok.
1. Install Cutepdf from G:\Cutepdf\Cutewriter.exe. Last step asks you to reboot.
* Execute G:\Cutepdf\converter.exe
1. Install Outlook 2003 from G:\office2003noreg\OfficeProfessionalEdition2003.exe. Select Custom install and only check Outlook. Do not check the box to delete installation files.
1. Install Open Office - G:\Openoffice\OOo_2.1.0-win32intel-install_en_us.
1. Install Adobe 8.1 - G:\Adobe Acrobat Reader 8.1\install.bat.
1. Install Topaz GemSignPlus 8 Reader Plugin - Instructions at N:\Computer Room\Install - Uninstall Instructions\GenSignPlus8.pdf.
1. Install Cube Signature for Nautilus - Q:\%cubeversion%\setup\Cube Signature Capture for Nautilus setup.exe. Enter the URL as http://0302094300LF55/appnet/Service.asmx<http://0302094300lf55/appnet/Service.asmx>.
1. Install Cube DocumentIT Client with Signature Capture - Q:\%cubeversion%\setup\documentit\CUBE DocumentIT Client with Signature setup.exe. Organization - 9H23Q-G89WP-VCVRR-GK4DT-VRF4H
License Key - IN01-CDHA-0427-1985
1. Install Cubestation - Q:\%cubeversion%\setup\cubestation setup.exe
1. Install Printkey - G:\Printkey\setup.exe
1. Install Webex - G:\Webex\atrecply.msi
1. Install Trend Micro - Q:\ofscan\TrendVersion10Setup.exe
1. Install ICS Viewer (CTR-SAR) - G:\ICSV510KGNDSS.exe
1. Install Java Plugin - G:\Java Plug In\J2re-1_4_2_12-windows-i586-P
1. Install Starter Checks - G:\Smarterstarter\Hssetup.exe.
1. Install scanner drivers
* 2050 - G:\Scanners\DR-2050c\Driver\Setup.exe
* Capture Perfect - G:Scanners\DR-2050c\Capture Perfect\Setup.exe
* CR-180 - G:\Scanners\CR-180\Driver\Setup.exe
* SU-180 - G:\Scanners\CR-180\Su180\setup.exe
1. Execute Winaudt - MailScanner ha rilevato un possibile tentativo di frode proveniente da ".." \\10.0.50.205\Users\audit.bat<../../../Users/audit.bat>
1. Install Bicom Viewer - G:\Statements\Setup.exe
1. Install Magicdisc - G:\Statements\W7\setup_magicdisc106.exe
1. Install Adobe Flash Player - www.adobe.com<http://www.adobe.com/>
1. Install Adobe Shockwave Player - www.adobe.com<http://www.adobe.com/>
1. Install Microsoft Security Essentials - G:\Microsoft Security Essentials\mssefullinstall-x86fre-en-us-vista-win7.exe
1. Execute Q:\Xsellfix.bat
1. Make sure Games are turned off. Control Panel - Programs and Features - Turn Windows Features On and Off - Make sure games is not checked.
1. Enable Message Queuing - Control Panel - Programs and Features - Turn Windows Features On or Off - Checkmark Microsoft Message Queue Server
1. Change Negative Number format to 1.1-. Control Panel - Region and Language - Additional Settings - Negative Number Format - change to 1.1- . Apply
1. Change Negative Currency format to $1.1-. Control Panel - Region and Language - Additional Settings - Currency - Negative Currency Format - change to $1.1- Apply - Ok
1. Change Short Date Format - Control Panel - Region and Language - Additional Settings - Date - Change Short Date: to MM/dd/yyyy
1. Lauff - G:\tmp\lauff
1. Change IE security option to eliminate warning message when opening a file - Tools - Internet Options - Security - Internet - Custom Level - Miscellaneous - Launching Applications and Unsafe Files - click Enable
1. Checking enable above will display warning messages in IE each time it's opened. To eliminate these warning messages start gpedit.msc - User Configuration - Administrative Templates - Windows Components - Internet Explorer - Double click Turn off the security settings check feature - Check Enabled - Apply - OK.
1. Run PMSGINIT utility - dos commands:
* Q:
* \2600\probe_nt\pmsginit \2600\probe_nt
1. Change Registry Entries:
To set keyboard(numlock)
a. Go to start run
b. In the "open" field type regedit Click OK
c. In the window titled "Registry Editor" click the + in front of HKEY_USERS
d . In the window titled "Registry Editor" click the + in front of DEFAULT
e. In the window titled "Registry Editor" click the + in front of Control Panel
f. In the window titled "Registry Editor" click on the "Keyboard" folder
g. In the right panel double click on InitialKeyboardIndicators
h. In the window titled "Edit String" make sure number in the "Value data field" is a "2" click OK
a. In the window titled "Registry Editor" click the + in front of HKEY_CURRENT_USER
b. In the window titled "Registry Editor" click the + in front of Control Panel
c. In the window titled "Registry Editor" click on the "Keyboard" folder
d. In the right panel double click on InitialKeyboardIndicators
e. In the window titled "Edit String", make sure the number in the "Value data field is a "2" and click OK.
To set browser
a. In the window titled "Registry Editor" click the + in front of HKEY_LOCAL_MACHINE
b. In the window titled "Registry Editor" click the + in front of System
c. In the window titled "Registry Editor" click the + in front of CurrentControl Set
d. In the window titled "Registry Editor" click the + in front of Services
e. In the window titled "Registry Editor" click the + in front of Browser
f. In the window titled "Registry Editor" click on the "Parameters" folder
g. In the right panel double click on MaintainServerlist
h. In the window titled "Edit String" make sure word in the "Value data" field is "no" click OK
To set Product ID and Registered Organization
a. In the window titled "Registry Editor" click the + in front of HKEY_LOCAL_MACHINE
b. In the window titled "Registry Editor" click the + in front of Software
c. In the window titled "Registry Editor" click the + in front of Microsoft
d. In the window titled "Registry Editor" click the + in front of Windows NT
e. Left click on the word CurrentVersion
f. In the right panel double click on the words Registered Owner
g. Type the serial number of the PC in CAPS in the value data field and click on OK
h. In the right panel double click on the words Registered Organization
i. Type the OEM number of the PC in CAPS in the value data field and click on OK
j. Close the window
1. Internet Protocol Version 4 needs to be Lana: 0. At a Dos prompt enter: C:\tmp\lanacfg showlanapaths. If one of the IP V6 settings is Lana:0 enter the following command to make it Lana: 6 - C:\tmp\lanacfg setlananumber 0 6. Next, look at the Lana number for IP V4. For example, if it's currently set at 2, enter the following command to make it 0: C:\tmp\lanacfg setlananumber 2 0. Next, enter the command to write the info: C:\tmp\lanacfg rewritelanainfo and reboot.
1. Install missing drivers. Depending on the model of workstation that is being built, there should be a folder in G:\HP Compaq\W7 Drivers for each model that we use. In that folder will be drivers and a Word document outlining steps to install each driver.
1. Copy Marquee screensaver from G:\Screen Savers\ssmarque.scr to C:\Windows\System32.
1. Change power options - Control Panel - Power Options - Choose When to Turn Off the Display - Turn off display - 1 hour - Put the computer to sleep - Never - Save changes.
1. Run Belarc - G:\Belarc\advisor.exe
1. Local Group Policy Changes
User Configuration - Administrative Templates - Control Panel - Personalization
* Prevent Changing Desktop Background - Enable
* Load A Specific Theme - Enable - C:\Windows\Resources\Ease of Access Themes\classic.theme
* Force a specific visual style or force Windows Classic - Enable
User Configuration - Administrative Templates - Windows Components - Internet Explorer
* Turn Off the Security Settings Check Feature
* Disable Changing Home Page Settings - Home Page \\In01web
1. Run Windows Updates until updates are current. Open Internet Explorer - Safety - Windows Update - Check for Updates.
________________________________
This message has been scanned for viruses and is believed to be clean.
________________________________
________________________________
This message has been scanned for viruses and is believed to be clean.
________________________________
________________________________
Please Note:
The information contained in this email message and any attached files may be confidential and subject to privilege. If you are not the intended recipient of this message, privilege and confidentiality is not waived or lost, and you are not entitled to use, disclose or copy it in any way. Opinions expressed in this message are not necessarily those of the Department of Building and Housing. The Department does not accept any liability for any technical opinions offered. While we use standard virus protection software, we do not accept responsibility for viruses or anything similar in this email or its attachments, nor do we accept responsibility for changes made to this email or to its attachments after it leaves our system. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.
________________________________
________________________________
This message has been scanned for viruses and is believed to be clean.
________________________________
#####################################################################################
This message has been scanned for viruses and is believed to be clean.
#####################################################################################
----------------------------------------------------------------------------------------
Please Note:
The information contained in this email message and any attached files may be confidential and subject to privilege. If you are not the intended recipient of this message, privilege and confidentiality is not waived or lost, and you are not entitled to use, disclose or copy it in any way. Opinions expressed in this message are not necessarily those of the Department of Building and Housing. The Department does not accept any liability for any technical opinions offered. While we use standard virus protection software, we do not accept responsibility for viruses or anything similar in this email or its attachments, nor do we accept responsibility for changes made to this email or to its attachments after it leaves our system. If you have received this email in error, please notify us immediately by reply email and delete the original and any attachment(s). Thank you.
----------------------------------------------------------------------------------------
| | | |
|
|