Preliminary Check-list and other Misc items

From NEOSYS Technical Support Wiki
Revision as of 13:04, 18 December 2013 by Priyanka (talk | contribs)
Jump to navigationJump to search

For Windows 2003 and 2008 - Refer to Installation Checklist to follow the order of doing it

  1. Make sure you have changed the default password to a strong one as per the guidelines
  2. Make sure that Windows is activated
  3. Make sure not connected to domain controller
  4. Microsoft network client should be disabled on all network connections.
  5. Away in a secure place and secure power cable
  6. No services like IIS and no server roles are installed
  7. Installed with more than one partition (C: D:)
  8. Make sure that the boot sequence is correct (CD,HDD,USB)
    - Allowing "Boot from USB" causes a severe risk of infection by boot sector viruses since the first infected USB device inserted WILL infect the server immediately as anti-virus programs are not active during boot
  9. Ensure the Windows CD/ I386 folder is copied to C Drive
  10. Make sure the system has a static internal IP address
  11. All high priority Windows updates from Microsoft are installed
  12. Automatic Windows update is configured for 3 AM
  13. Make all desktop icons visible (right click on desktop > Personalise > Change desktop icons and tick Computer, User Files, Network, Recycle Bin and Control Panel)
  14. Change the name of the server to NEOSYS
  15. In Tools > Folder Options > View – Tick Show hidden files and folders and Un-tick Hide extensions
  16. Check time zone and make sure it is set to the correct region of installation
  17. Disable Autorun (all drives) – Run > gpedit.msc > Computer Configuration > Administrative Templates > Windows Components > Auto Play Policies > Turn off Autoplay should be enabled for All Drives
  18. Enable Audit Privilege Use – Control Panel > Administrative Tools > Local Security Policy > Local Policy > Audit Policy > Audit Privilege Use – Tick both Success and Failure
  19. Rename D drive name to NEOSYS
  20. Create shortcuts for Computer Management, D drive, Scheduled Tasks and Command Prompt in the Quick Launch area
  21. Use Client's/ISP's DNS and not a general service like 8.8.8.8 so that we are aware of any significant network changes.

For Windows 2008 (additional)

  1. Rename Administrator to administrator (A should be in small caps)
  2. Disable complex password settings under Local Security Policy (under Administrative Tools > Local Security Policy > Account Policies > Password Policy)