KB1030: Setting Up a New Machine (CCI Standard Windows 10 Deployment Process)

Overview

This guide outlines the standard procedures for setting up a new Windows 10 machine under the CCI deployment process. Follow these steps to ensure consistency and proper configuration.

Initial Setup Steps

    1. Create a Local Admin Account:
        • Username: admin-cci
        • Add to the Administrators group.
        • Save the password securely in the designated location.

    2. Install TeamViewer:
        • Download the installer from this link.
        • Ensure to setup the unattended password, and option password to lock the settings.
        • Store them in the password manager in the designated folder.
        • Ensure the device is added to the correct group in TeamViewer management.

Azure AD and MDM Enrollment

Case 1: No MDM/Autopilot

    • Join the machine to Azure AD manually:
        • Use a global admin account to join the device.
        • Verify join status with the command: dsregcmd.exe /status

Case 2: MDM/Autopilot Setup

    1. Autopilot Enrollment:
        • During the Out-of-Box Experience (OOBE), use the Autopilot script to register the device.
        • Install the necessary PowerShell module: Install-Script -Name Get-WindowsAutoPilotInfo
        • Import the device to Autopilot enrollment using tenant global admin credentials.

    2. Azure AD Join:
        • Complete the OOBE process with an Azure AD Premium license account.
        • Verify the join status with dsregcmd.exe /status

Software and Configuration

    1. Install Required Software:
        • ESET Endpoint Security: Use the customer’s designated ESET account to activate.
        • Microsoft Office 365 Apps: Use the Office Deployment Tool with a pre-configured XML file.
        • TeamViewer, Chrome, and Adobe Acrobat: Download installers from official websites.

    2. Hardware-Specific Tools:
        • Install Dell Command Update and apply all updates.
        • Optionally, run Dell Optimizer for enhanced performance.

    3. Backup and Sync Tools:
        • Set up OneDrive auto-backup for known folders (Desktop, Documents, Pictures).

    4. Helpdesk Integration:
        • Add the new machine’s details (asset) such as the serial number and hostname to the inventory management system within the ticketing system.
        • Ensure to link the asset to the ticket or change initiating the request at hand.

Error Resolution

    • Error: Insufficient Privileges
        • Ensure the admin account used has the required roles and permissions.
        • Elevate privileges in the Azure portal if necessary.

    • Error: Script Issues
        • Run PowerShell scripts with the following command Set-ExecutionPolicy -ExecutionPolicy RemoteSigned

Useful Commands

    • Open Network Connections: ncpa.cpl
    • Check device join status: dsregcmd.exe /status