Change Log (PC-10)

Posted in | April 9th, 2011

Original Configuration

Configuration Change

Purpose
Computer Name: PC-XX Computer Name: PC-10 Change to match Desktop PC Naming Convention
Workgroup: WORKGROUP Workgroup: VI-BRANCH Change to match the VI-SERVER-01 workgroup
Permitted to Upgrade IE from version 6 Downloaded IE7-9 Blocker Toolkits Prevent IE from upgrading beyond Version 6
IE7BlockerToolkit
IE8BlockerToolkit
IE9BlockerToolkit
Ran IE Blocker Scripts 
IE70Blocker.cmd /B
IE80Blocker.cmd /B
IE9_Blocker.cmd /B
Added IE70Blocker.adm, IE80Blocker.adm, IE9_Blocker.adm to Local Computer Policy > Computer Configuration > Administrative Templates
Windows XP Welcome Screen for logon Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options: 

Interactive logon: Do not display last username – From “Not defined” to “Enabled”

Interactive logon: Do not require CTRL-ALT-DEL – From “Not defined” to “Disabled”

 Require CTRL-ALT-DEL to access classic logon screen. 

Require the Username to be typed in.
Local Computer Policy > Computer Configuration > Administrative Templates > System > Logon: 

Always use classic logon – From “Not Configured” to “Enabled”

 Force the classic logon screen.
Windows Firewall OFF Local Computer Policy > Computer Configuration > Administrative Templates > Network > Network Connections > Windows Firewall > Standard Profile: 

Windows Firewall: Protect all network connections – From “Not configured” to “Enabled”

Windows Firewall: Allow ICMP exceptions – From “Not configured” to “Enabled” with “Allow inbound echo requests”\

Windows Firewall: Allow Remote Desktop exception – From “Not configured” to “Enabled”

 Turn on and configure the Windows Firewall.
View settings for Local Computer Policy > Computer Configuration > Administrative Templates are filtered to “Only show policies that can be fully managed” Unchecked the “Only show policies that can be fully managed” filter Allow the IE Blocker settings to display
Allow IE to update to version 7 Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Updates > Automatic Updates Blockers: 

Do not allow delivery of IE 7 through Automatic Updates – From “Not configured” to “Enabled”

 Prevent automatic delivery of IE7
Allow IE to update to version 8 Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Updates > Automatic Updates Blockers v2: 

Do not allow delivery of IE 8 through Automatic Updates – From “Not configured” to “Enabled”

 Prevent automatic delivery of IE8
Allow IE to update to version 9 Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Updates > Automatic Updates Blockers v3: 

Do not allow delivery of IE 9 through Automatic Updates – From “Not configured” to “Enabled”

 Prevent automatic delivery of IE9
Automatic Updates OFF Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Updates: 

Configure Automatic Updates – From “Not configured” to “Enabled” with “4-Auto download & scheduled install”, “0-Every day”, “12:00”

Automatic Updates detection frequency – From “Not configured” to “Enabled” with “4” Hours

Re-prompt to restart w/ scheduled installations – From “Not configured” to “Enabled” with “60” minutes

 Turn Automatic Updates on. 

Download & install updates everyday at 12:00 p.m.

Detect updates every 4 hours

For updates that require Windows to restart, re-prompt user to restart every 60 minutes.
Screen Saver starts after 10 minutes of inactivity; does not require password. User Configuration > Administrative Templates > Control Panel > Display: 

Screen Saver – From “Not Configured” to “Enabled”

Password protect the screen saver – From “Not Configured” to “Enabled”

Screen Saver timeout – From “Not configured” to “Enabled” with “1200” seconds

 Force the Screen Saver on 

Require a password

Screen Saver is activated when the PC has been idle for 1200 seconds (20 minutes)
No Anti-Virus Installed Symantec Anti-Virus from \\VI-SERVER-01\applications\SAV10.1.6_unmanagedXP\ Protect the computer fron viruses using Symantec AntiVirus
No Anti-Spyware Installed Windows Defender from Microsoft.com Protect the computer from spyware using Windows Defender
Internet Explorer 6 only browser Installed Firefox 3.6.16 

Configured as the default browser

 Provide a more up to date browser than IE 6, especially since IE 6 is required for Virtual Imagination specific workflows.
Installed AdBlock Plus browser extension for Firefox Help reduce adware/spyware by not allowing most ads to load when browsing.
No PDF Reader software Downloaded and installed Adobe Reader X Allow PDF files to be opened and read.
No Printers Added a network printer as a local printer 

Added a Standard TCP/Ip port, named DTC-205-10.10.205.215

Added the printer using that port.  Named the printer DTC-205-HP-LaserJet-4050-PS

 Added a network printer to a local TCP/Ip port
Automatic updates per computer policy Updates downloaded and installed on schedule (Current time 12:22 p.m.) Keeps the computer up to date
No Account for Pat Smith Created an account for Pat Smith, psmith, and added the account to the Power Users group Create an account for Pat to use to login to PC-10.
psmith – Full path not displayed in Title Bar Explorer Windows > Tools Menu > Folder Options > View tab: 

CHECK- Display full path in title bar

UNCHECK – Hide extensions for known file types

 Full path shows in Title Bar 

All file extensions are displayed
Default browser IE 6 Changed to Firefox Keep IE for Virtual Imagination specific workflows
default home pages from installation Changed both IE and Firefox to www.virtualimagination.com Per policies
Wallpaper Windows XP default Set to VI-User Desktop Per policies
Start Menu Windows XP default Control Panel – Changed from link to Display as Menu 

Network Connections – Changed from link to Display as connection menu

My Pictures – Removed

My Music – Removed

Set Program Access Defaults – Removed

My Network Places – added

 per policies
Outlook 2007 – not configured Configured Outlook to check psmith@virtualimagination.com as POP3 per policy
No quick access to \\VI-SERVER-01\OfficeDocuments Created a shortcut on the desktop that points to \\VI-SERVER-01\OfficeDocuments per policy
No mapped drive to \\VI-SERVER-01\PSMITH Created a mapped drive (U:) to \\VI-SERVER-01\PSMITH per policy