Computer Setup & SOE Configuration
The aim of Psychiatry IT is to create, as far as possible, a standarised operating environment (SOE). The following list is how this is best achieved.
Creation of PC Ghost SOE image
- Disconnect from all networks
- Boot from CD and install University site licenced copy of Win XP SP2
- Format hard drive as one NTFS partition, preserving the original Dell or Toshiba hidden recovery partition
- Configure all regional settings to either: Australia, English (Australia) or Australian eastern standard time (ensure all US settings are removed except the keyboard)
- DHCP settings, no conection to domain, create user a/c: user
- Configure Win XP via Control Panel
- Switch to Classic View
View > Details
Tools > Folder Options: Use Windows classic folders, Open each folder in own window, Show hidden files & folders, Untick hide extensions, Untick hide protected OS files, Untick simple file sharing, Apply, Apply to all folders - Administrative Tools > Computer Management
Set password for local 'user' account - Automatic Updates
Automatic, Everyday 12pm - Date & Time
Internet Time > ntp.unimelb.edu.au
Alternatively run regedit \HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers
Set 'default' string to 1, set string '1' to ntp.unimelb.edu.au, set string '2'to ntp2.unimelb.edu.au - Mouse
For laptops turn off 'tapping' on trackpad for mouse double click - Network Connections
Properties > TCP/IP, show icon, set WINS (Generally Hospital WINS servers first, then University WINS servers 128.250.144.64 & 128.250.144.80) - Power Options
Untick 'Prompt for password when computer resumes from standby'
Turn off hibernation
Desktops: turn off monitor after 30 mins, hard drive after 1 hr, system standby after 1 hr
Laptops: Toshiba Power Saver control panel
Power Adapter: turn off monitor after 15 mins, hard drive after 10 mins, system standby after 30 mins
Battery: turn off monitor after 10 mins, hard drive after 5 mins, system standby after 15 mins - Printers and Faxes
Add main network printers and configure settings (RAM, A4 paper size, duplexer, turn off job storage, etc) - Regional and Language Options
Check that English and Australian settings are applied in every option and are correct
Remove any US settings (ie you only need one US setting to stuff everything up!) - System
- Taskbar & Start Menu
- User Accounts
- Windows Firewall
- Install VirusScan & patches & configure
- VirusScan Console
Autoupdate: schedule daily 12pm, random 1hr, missed task 30mins
Scan all fixed disks: scan inside archives, decode MIME encoded files
System utilisation: 80%
Schedule: stop after 2hrs, weekly, Wed 12:30pm, missed task 30min, no randomisation
Unwanted programs: spyware, adware, dialers, password crackers, jokes, other - Tools > Edit Autoupdate Repository
Add UniMelb
ftp://ftp.unimelb.edu.au/pub/pc/virusscan7x/. port 21, anonymous
move UniMelb to top of list - Connect to network
- Update VirusScan definitions and check version numbers in the 'About' window
- Run 'Windows Update' & select 'Custom' (install all updates: critical, high priority, software & hardware)
- Install command console (Run: D:\i386\winnt32 /cmdcons)
- Set registration details
(Run: regedit \HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Current Version\
Registered Organisation: The University of Melbourne
Registered Owner: Department of Psychiatry - Customise Default User Profile
- Rename 'Default User' folder to 'Original Default User' (C:\Documents and Settings\ )
- My Computer > Properties > Advanced > User Profiles > Settings
Copy local 'Psychixxxx\user' profile to C:\Documents and Settings\Default User and change permissions to 'Everyone'
Via folder properties, make new 'Default User' folder hidden (top level only) - Restart
- Run sysprep (version 1 for Win2k, version 2 for WinXP) and reseal computer
- Boot computer with Ghost boot disk and create Ghost image via network to another computer running GhostCast Server
- Restart
Configuration of Ghost imaged PC
- Set correct hostname for PC that matches asset number (ie Psychixxxx, where xxxx = 4 digit asset No.)
Re-enter University licensed Windows serial number during Windows setup routine - Set WINS settings
- Join computer to 'unimelb.edu.au' domain
- Add psychi-admins-g group and section specific admins group (ie psychi-xxxx-admins-g) to local administrators group
Add psychi-powerusers-g to local power users group
For laptops add staff member to local administrators group as well - Update VirusScan virus definitions
- Check for any recent Windows updates
- Install any individually licensed programs, such as SPSS
- Check for any other recent updates for programs