Overview

• Article Owner: CENV IT

• Manager: Scott Gallagher

Purpose

To provide a step-by-step guide for standard steps that should be performed on all machines to initialize the device as a managed device within the CENV. Depending on the device includes imaging, installing applications, creating users, and installing management profiles.

Audience

IT professionals or staff responsible for the initial configuration of operating systems in a managed IT environment.

New Computer Setup Process

The following process outlines the exact steps that should be taken to initialize any Windows or MacOS machine. This should include every action that must be performed from the moment it is decided that a machine is needed to when it is either deployed or moved into inventory.

Ticket Creation

• Make a ticket with the summary New Computer Setup: {Device Type} - {Serial Number} (eg. New Computer Setup: Dell Precision 3380 - 14W3W54).

• The description should include relevant information such as who the device is going to, where it is going, and what it will be used for

•  

• This ticket will be used while you are doing the setup of the machine to document any issues you encounter and what has been already done for the machine.

Asset Tracking and Inventory

Processes for adding devices to the inventory system. (In Progress)

*To find device information such as warranty and purchase dates, enter the service tag into Dell Technologies search bar

Find your Service Tag or Serial Number | Dell US

On-Device Setup

Windows

1. Create a new Object in Active Directory - This will have to be done on another computer

2. Disable RAID in the BIOS

   1. Turn off the Device

   2. While pressing the power-on button, hold the BIOS key (For Dell Devices this is F2)

   3. Under Storage tab, select AHCI/NVMe

   4. Ensure Secure Boot is enabled (Under Boot Configuration Tab)

   5. Save changes, click exit and turn off the system

3. Turn on the system again, and this time hold F12

4. When presented with the one time boot screen (After Holding F12), select “ONBOARD NIC (IPV4)”

5. When presented with the Task Sequence Wizard, select “WWU - Windows 10/11 x64 Deploy”

   Open

   

6. Input Task Sequence Variables

   1. For “Area”, under value input the room name the system will be living in ex. es318

   2. For NON-LAB computers, under “Desk”, input “CENV” *NOTE* DESK and LAB parameters are mutually exclusive

   3. For LAB computers, under “Lab” input “CENV” *NOTE* DESK and LAB parameters are mutually exclusive

   4. For “ODSComputerName”, follow the naming system at the top of this document: https://wwuhelp.atlassian.net/wiki/spaces/IKB/pages/1736245252

      1. Example for an ENVS workstation: CENV-W-CS2TQ5

MacOS

1. Power on the device

2. Go through Region and Accessibility settings.

 

Open

Region Settings

 

 

Open

Accessibility Settings

 

3. Enroll the device by signing in with your WWU email address.

   1. If you do not see this screen, the device was not enrolled in Apple School Manager.

Open

WWU Remote Management Screen

4. Agree to the Terms and Conditions

5. Create a Computer Account

   1. Full name: CENVadmin

   2. Account name: cenvadmin

   3. Password: If you are imaging a computer you should know it

   4. Hint: Leave blank

6. Enable Location Services

7. Analytics

   1. Ensure Share Mac Analytics with Apple is selected, this is the default

8. Screen Time

   1. Click Set up Later

9. Siri

   1. Ensure Enable Ask Siri is not selected, this is not the default

10. Touch ID (For devices that support it)

    1. Click Set up Touch ID Later and Continue

11. Choose Your Look

    1. Select Light, this is the default

12. Manually Enroll the Device in Jamf if it was not enrolled in Apple School Manager

13. Navigate to System Settings > General > Software Update and perform any available updates

14. Open Self-Service from the Applications folder and log in with your credentials.

15. Locate the AD Rename icon in Self-Service and rename the device according to the naming convention.

    1. If you cannot access AD Rename you can instead Open terminal and type the following commands supplying each with the new computer name

       1. sudo scutil --set ComputerName

       2. sudo scutil --set HostName

       3. sudo scutil --set LocalHostName

    2. These commands may ask for the admin password, type it in, and do not be alarmed if nothing appears in the terminal when you type, this is how protected fields are entered in the terminal.

16. Enable Remote Management at General > Sharing > Remote Management

17. Troubleshooting:

    1. If Jamf Self-Service apps are stuck, log in to Jamf to troubleshoot installation issues and policy logs.