Preliminary Check-list and other Misc items: Difference between revisions

From NEOSYS Technical Support Wiki
Jump to navigationJump to search
No edit summary
m (Added the language step for Win 10 installations)
Line 1: Line 1:
For Windows 2003 and 2008 - <B>Refer to Installation Checklist to follow the order of doing it</B>
For Windows 2003 and 2008 - <B>Refer to Installation Checklist to follow the order of doing it</B>
# Make sure you have changed the default password to a strong one as per the guidelines
 
# Make sure that Windows is activated
#Make sure you have changed the default password to a strong one as per the guidelines
# Make sure not connected to domain controller
#Make sure that Windows is activated
# No services like IIS and no server roles are installed
#Make sure not connected to domain controller
# Installed with more than one partition (C: D:)
#No services like IIS and no server roles are installed
# Make sure the system has a static internal IP address
#Installed with more than one partition (C: D:)
# Away in a secure place and secure power cable
#Make sure the system has a static internal IP address
# Microsoft network client should be disabled on all network connections.
#Away in a secure place and secure power cable
# Make sure that the boot sequence is correct (CD,HDD,USB)<BR> - Allowing "Boot from USB" causes a severe risk of infection by boot sector viruses since the first infected USB device inserted WILL infect the server immediately as anti-virus programs are not active during boot
#Microsoft network client should be disabled on all network connections.
# Ensure the Windows CD/ I386 folder is copied to C Drive. (Not required for Windows Server 2008 and Windows 10)
#Make sure that the boot sequence is correct (CD,HDD,USB)<BR> - Allowing "Boot from USB" causes a severe risk of infection by boot sector viruses since the first infected USB device inserted WILL infect the server immediately as anti-virus programs are not active during boot
# All high priority Windows updates from Microsoft are installed
#Ensure the Windows CD/ I386 folder is copied to C Drive. (Not required for Windows Server 2008 and Windows 10)
# Automatic Windows update is configured to install at 3AM and can be on any day between Sunday to Thursday since Support will be available to restart NEOSYS processes after a server restart. Refer [http://techwiki.neosys.com/index.php/Installing_NEOSYS_Service#Setting_up_daily_scheduled_tasks How to configure daily Scheduled Tasks]
#All high priority Windows updates from Microsoft are installed
# Make all desktop icons visible (right click on desktop > Personalise > Change desktop icons and tick Computer, User Files, Network, Recycle Bin and Control Panel)
#Automatic Windows update is configured to install at 3AM and can be on any day between Sunday to Thursday since Support will be available to restart NEOSYS processes after a server restart. Refer [http://techwiki.neosys.com/index.php/Installing_NEOSYS_Service#Setting_up_daily_scheduled_tasks How to configure daily Scheduled Tasks]
# Change the name of the server to NEOSYS
#Make all desktop icons visible (right click on desktop > Personalise > Change desktop icons and tick Computer, User Files, Network, Recycle Bin and Control Panel)
# In Tools > Folder Options > View – Tick Show hidden files and folders and Un-tick Hide extensions
#Change the name of the server to NEOSYS
# Check time zone and make sure it is set to the correct region of installation
#In Tools > Folder Options > View – Tick Show hidden files and folders and Un-tick Hide extensions
# Disable Autorun (all drives) – Run > gpedit.msc > Computer Configuration > Administrative Templates > Windows Components > Auto Play Policies > Turn off Autoplay should be enabled for All Drives
#Check time zone and make sure it is set to the correct region of installation
# Enable Audit Privilege Use – Control Panel > Administrative Tools > Local Security Policy > Local Policy > Audit Policy > Audit Privilege Use – Tick both Success and Failure
#In Settings > Time & Language > Language make sure Windows Display language is the same as Regional Format in the Region section. Recommended language is English (US). (Only required for Windows 10)
# Disable password expiry – Control Panel > Administrative Tools > Local Security Policy > Account Policies > Password Policy > Maximum password age – Change to "0" days.
#Disable Autorun (all drives) – Run > gpedit.msc > Computer Configuration > Administrative Templates > Windows Components > Auto Play Policies > Turn off Autoplay should be enabled for All Drives
# Rename D drive name to NEOSYS
#Enable Audit Privilege Use – Control Panel > Administrative Tools > Local Security Policy > Local Policy > Audit Policy > Audit Privilege Use – Tick both Success and Failure
# Create shortcuts for Computer Management, D drive, Scheduled Tasks and Command Prompt in the Quick Launch area
#Disable password expiry – Control Panel > Administrative Tools > Local Security Policy > Account Policies > Password Policy > Maximum password age – Change to "0" days.
# Use Client's/ISP's DNS and not a general service like 8.8.8.8 so that we are aware of any significant network changes.
#Rename D drive name to NEOSYS
#Create shortcuts for Computer Management, D drive, Scheduled Tasks and Command Prompt in the Quick Launch area
#Use Client's/ISP's DNS and not a general service like 8.8.8.8 so that we are aware of any significant network changes.


For Windows 2008 (additional)
For Windows 2008 (additional)
# [[Changing username from Administrator to administrator|Rename Administrator to administrator (A should be in small caps)]]


=== Configuring the administrator account in Windows 10 ===
#[[Changing username from Administrator to administrator|Rename Administrator to administrator (A should be in small caps)]]
 
===Configuring the administrator account in Windows 10===


run cmd as administrator then
run cmd as administrator then

Revision as of 07:54, 18 November 2020

For Windows 2003 and 2008 - Refer to Installation Checklist to follow the order of doing it

  1. Make sure you have changed the default password to a strong one as per the guidelines
  2. Make sure that Windows is activated
  3. Make sure not connected to domain controller
  4. No services like IIS and no server roles are installed
  5. Installed with more than one partition (C: D:)
  6. Make sure the system has a static internal IP address
  7. Away in a secure place and secure power cable
  8. Microsoft network client should be disabled on all network connections.
  9. Make sure that the boot sequence is correct (CD,HDD,USB)
    - Allowing "Boot from USB" causes a severe risk of infection by boot sector viruses since the first infected USB device inserted WILL infect the server immediately as anti-virus programs are not active during boot
  10. Ensure the Windows CD/ I386 folder is copied to C Drive. (Not required for Windows Server 2008 and Windows 10)
  11. All high priority Windows updates from Microsoft are installed
  12. Automatic Windows update is configured to install at 3AM and can be on any day between Sunday to Thursday since Support will be available to restart NEOSYS processes after a server restart. Refer How to configure daily Scheduled Tasks
  13. Make all desktop icons visible (right click on desktop > Personalise > Change desktop icons and tick Computer, User Files, Network, Recycle Bin and Control Panel)
  14. Change the name of the server to NEOSYS
  15. In Tools > Folder Options > View – Tick Show hidden files and folders and Un-tick Hide extensions
  16. Check time zone and make sure it is set to the correct region of installation
  17. In Settings > Time & Language > Language make sure Windows Display language is the same as Regional Format in the Region section. Recommended language is English (US). (Only required for Windows 10)
  18. Disable Autorun (all drives) – Run > gpedit.msc > Computer Configuration > Administrative Templates > Windows Components > Auto Play Policies > Turn off Autoplay should be enabled for All Drives
  19. Enable Audit Privilege Use – Control Panel > Administrative Tools > Local Security Policy > Local Policy > Audit Policy > Audit Privilege Use – Tick both Success and Failure
  20. Disable password expiry – Control Panel > Administrative Tools > Local Security Policy > Account Policies > Password Policy > Maximum password age – Change to "0" days.
  21. Rename D drive name to NEOSYS
  22. Create shortcuts for Computer Management, D drive, Scheduled Tasks and Command Prompt in the Quick Launch area
  23. Use Client's/ISP's DNS and not a general service like 8.8.8.8 so that we are aware of any significant network changes.

For Windows 2008 (additional)

  1. Rename Administrator to administrator (A should be in small caps)

Configuring the administrator account in Windows 10

run cmd as administrator then

Rename Administrator to be administrator (BEFORE INSTALLING CYGWIN). Check in Computer management that it is successful.

wmic useraccount where name='Administrator' rename 'administrator'

Set a password for administrator and enable login

net user administrator *
net user administrator /active:yes