PC Baseline Configurations

PC Baseline Configurations at ICOM can be performed either by using installation media or by restoring a disk image.

Baseline Software

Google Spreadsheet

Producing a build

Administrator accounts

Administrator, default account is disabled
Support, local administrator account created. Useful for when a PC loses trust with the domain

Software

Freeware:
- P:\_IT\Software\_Freeware installers\Ninite.20190722.exe
- Software list:
  - .NET 4.8
  - Air
  - Dropbox
  - Filezilla
  - Google Backup and Sync
  - Google Earth
  - Greenshot
  - ImgBurn
  - Java (JDK)
  - Notepad++
  - Paint.NET
  - PDFCreator
  - PuTTY
  - Silverlight
  - Skype
  - TeamViewer 14
  - VLC
  - WinDirStat
  - WinMerge
  - WinSCP

Disk image

ICOM currently uses software called Paragon Hard Disk Manager 15 Professional to work with Disk Images. To create or restore an image boot the target machine with the USB drive labelled "Paragon boot." A limited number of images of clean builds are available for a restore on an external hard drive enclosure labelled "Paragon images."

Image restore

Standard builds

SPAT can be placed on its own volume on PC used in conference rooms so it does not need to be replaced after the PC is imaged.

Remote worker builds

ICOM PCs for use by workers who work primarily outside of the Calgary office, are not added to the ICOM Domain.

Passwords

The built-in Administrator account setup with a password that matches the current Technical Password Insecure (\\icomnt11\Private\Admin\ICOM IT\Settings\Technical Password Insecure.txt). This password can be shared with the end-user, so they can perform administrative functions on their own.

A new local account should be created as a back-door. The username being "support" and the password being the current Technical Password (\\icomnt11\Private\Admin\Client Services\passwords\Technical Password.txt).

Enable Administrator in Windows 7/8

Start >> Search: cmd
Right-click Command Prompt, and then click Run as Administrator
net user administrator /active:yes
net user administrator <Password>

Boardroom public account

A public-use account can be setup on some remote computers:

User: boardroom
Pass: boardroom

Hide ICOM accounts

http://superuser.com/questions/577129/how-to-hide-an-admin-account-on-the-windows-7-logon-screen

Page updated

Report abuse