Preliminary Check-list and other Misc items
From NEOSYS Technical Support Wiki
Jump to navigationJump to search
For Windows 2003 and 2008 - Refer to Installation Checklist to follow the order of doing it
- Make sure you have changed the default password to a strong one as per the guidelines
- Make sure that Windows is activated
- Make sure not connected to domain controller
- Microsoft network client should be disabled on all network connections.
- Away in a secure place and secure power cable
- No services like IIS and no server roles are installed
- Installed with more than one partition (C: D:)
- Make sure that the boot sequence is correct (CD,HDD,USB)
- Allowing "Boot from USB" causes a severe risk of infection by boot sector viruses since the first infected USB device inserted WILL infect the server immediately as anti-virus programs are not active during boot - Ensure the Windows CD/ I386 folder is copied to C Drive
- Make sure the system has a static internal IP address
- All high priority Windows updates from Microsoft are installed
- Automatic Windows update is configured for 3 AM
- Make all desktop icons visible (right click on desktop > Personalise > Change desktop icons and tick Computer, User Files, Network, Recycle Bin and Control Panel)
- Change the name of the server to NEOSYS
- In Tools > Folder Options > View – Tick Show hidden files and folders and Un-tick Hide extensions
- Check time zone and make sure it is set to the correct region of installation
- Disable Autorun (all drives) – Run > gpedit.msc > Computer Configuration > Administrative Templates > Windows Components > Auto Play Policies > Turn off Autoplay should be enabled for All Drives
- Enable Audit Privilege Use – Control Panel > Administrative Tools > Local Security Policy > Local Policy > Audit Policy > Audit Privilege Use – Tick both Success and Failure
- Rename D drive name to NEOSYS
- Create shortcuts for Computer Management, D drive, Scheduled Tasks and Command Prompt in the Quick Launch area
- Use Client's/ISP's DNS and not a general service like 8.8.8.8 so that we are aware of any significant network changes.
For Windows 2008 (additional)
- Rename Administrator to administrator (A should be in small caps)
- Disable complex password settings under Local Security Policy (under Administrative Tools > Local Security Policy > Account Policies > Password Policy)