Editer

Commissioning a Windows Laptop for BSG Deployment

Overview

This is the standard method of commissioning a BSG Windows Laptop onto the BSG domain. The laptop should be running Windows 10 Enterprise, and be BitLocker compatible.

Fresh out of the box Dell Computers will have Windows 10 Enterprise installed. If you need to install a fresh version of Windows 10 Enterprise, please follow the below steps.

Process

Installing Windows 10

1. Download the latest Windows 10 bundle from the University Microsoft Download Page. You will need to login with your SSO username and password.

2. Create a bootable Windows 10 USB drive. You will need this to install a fresh version of Windows 10.

3. Boot from USB by pressing F12 on start-up, then choose your USB media from the boot options.
4. Before installing Windows 10, wipe the hard drive to create a new single partition.
5. Follow the steps to install Windows 10 Enterprise.
6. Create an ladmin account when prompted, this will be the Local Admin account for the end-user. Create a sufficiently strong password and record this in 1Password. You can wait to do this till the end so that the rest of the process is quicker and easier.
7. Set a name based on the current naming convention and make a record of this on ‘Windows Computer List’ excel spreadsheet. Assign an asset number and log this in the windows excel spreadsheet.
8. Place a name and asset number sticker onto the back of the laptop.

Binding to BSG Domain

Once you have booted into windows 10, you need to assign the computer the to BSG domain. Do this by following the below steps.

1. Login to the NAC and put the device on the 'User' VLan using its MAC address.

2. Join the device to the BSG Domain, using your -s account to confirm.
   • On the Start screen, type Control Panel, and then press ENTER.
   • Navigate to System and Security, and then click System.
   • Under Computer name, domain, and workgroup settings, click Change settings.
   • On the Computer Name tab, click Change.
   • Under Member of, click Domain, type the name of the domain that you wish this computer to join, and then click OK.
   • Click OK, and then restart the computer.
3. Once the computer has restarted, search for the new computer on the domain and place this in the correct computer group. This will then apply all necessary group polices for the computer.
4. When the computer has restarted, login as the ladmin account. Remember to use the computer name with the username when logging in e.g. bsg-computername\ladmin.
5. Check for any updates for windows and install them.

Software Setup

1. Uninstall 'MyOffice' if present, then download and install Microsoft Office 2016 from the University Microsoft Download site.

2. Navigate to Dell Support page and in install any missing drivers. Make sure to install any dock patches that may be needed.

3. Install the following software:
   • Sophos Endpoint
   • Microsoft Teams
   • Chome

   • FireFox

   • Adobe Reader
   • Forticlient

4. For Oracle Financials users, install the University Java package

5. For CoreHR users you must follow the setup instructions at the CoreHR Local IT webpage.

6. For Oracle Financial users, you must follow the setup instructions at the Oracle Financials Technical Support page.

Prerequisites

Process

Prepare for enrolment

Enrol and prepare for Planting

Planting and software deployment

Laptops only: Initiate Bitlocker encryption

Confirm Configuration Profiles, restrict admin rights and hand over to user