User Setup Checklist

 Username: %firstinitial%%lastname% One Time Password:

1) In Active Directory Users and Computers, Create user and Exchange Mailbox in appropriate OU
a) If the user already exists, right click the user and choose Exchange Tasks
2) Add user to appropriate Global Groups or Distribution Lists
3) Add Global Group to My Documents Redirection Group Policy. Use a Global group to build the policy.
4) Add user to Internet Mail or No Internet Mail group (This builds the Everyone distribution list)
5) Add user to OWA (Outlook Web Access) or pptp_users (remote access) The user can’t be in both groups. If they
need to be in both groups, they will need a separate user account for each.
a) Active Directory Users and Computers, Double click the user.
i) Dial-in tab, Control Remote Access through Remote Access Policies.
b) OWA only: Active Directory Users and Computers, Double click the user.
i) Account tab, Enable: Store password using reversible encryption
ii) Reset the user’s password to One Time Password
6) Organization, Company, Add %Company Name%
7) Exchange Advanced Tab, Custom Attributes, Edit customAttribute1, %Company Name% (This builds the Global
Address List.)
8) Profile tab, add department logon script to Logon Script.
a) Connect home folder to Z: \\servername\users\%username% (Say No to the full control question)
9) Add SMTP e-mail address Set as Primary

Workstation Setup Checklist

 For a workstation that needs to be re-installed, always do a clean install by wiping the hard drive (delete and re-create
primary partition and run NTFS format).
1) Check vendor website for latest downloads, drivers, BIOS, etc. for machine model.
2) Set local administrator password:
3) Right click "My Computer" click "Properties", then "Computer Name". Assign local computer name based on
naming policy. Check Active Directory Computer list to avoid duplications. Restart.
4) Right click "My Computer" click "Properties", then "Computer Name". Join domain %domainname%.local. Restart.
Use a domain administrator account to join and log onto machine after reboot. (Never use a personal user account to
do administrative work)
5) In Active Directory Users and Computers, move the computer into the WK Office 2003 OU.
a) This GPO will install Office 2003 Pro, Symantec 10.1, Adobe Reader 8.0, and Sun Java 6.0
b) Each application has a manual setup in the \\servername\ClientApps folder
c) If Office or Adobe Reader doesn’t function properly after the Managed Installation, go to the Control Panel,
Add/Remove Programs, Office or Outlook, Change, choose the repair option.
6) Uninstall any pre-installed retail software programs, i.e. antivirus, Quicken, Indexing Service, IIS, Msn Explorer,
Networking Services, Msn Messenger, etc (from Control Panel - Add/Remove Programs, Add/Remove Windows
Components.)
7) Check Time Zone: Mountain Time, Enable Automatically adjust clock for daylight saving times.
8) Disable Standby/Hibernate.
9) Install current Service Pack for Operating System, if not already on system. (XP – SP-2, 2000 – SP-4)
10) From \\servername\clientapps directory install appropriate programs as needed
a) Install VNC. Use standard VNC password:
b) Install Symantec Corporate Antivirus client from \\servername\vphome\clt-inst\win32\setup.exe
c) Install all Windows Updates from windowsupdates.microsoft.com
11) Install specific software for pc.

User and Workstation Setup Checklist Revised: 7/8/2007

 12) XP\2000: Put common shortcuts on All Users Desktop.
a) To set security for Documents and Settings, or the All Users Desktop or any other folders that you are having
security issues with:
i) Right click on the folder, choose properties.
ii) Security Tab, Advanced button.
iii) Click Replace permission entries . . ., click OK.
b) If this doesn’t work or you get an error, in the Advanced button, go to the Owner tab, choose Replace owner on
sub containers and objects. Then try replacing permissions again.
13) Share any local printers. Go to the General tab and type in the Location.
This item is only for managers and users with software security requirements to the local machine.
1) Right-click My Computer and select Manage, Local Users and Groups
2) Under Groups double-click on Power Users. (Choose Administrators as a last resort.)
3) Add the Active Directory Security Group of the end user(s). Make sure the Select Users or Groups search window is
looking in %OurDomain%, not the local machine location.
Log in as the end user(s)
1) Start Outlook, confirm Outlook client setup.
2) If they are not in a Folder Redirection Policy, Right Click My Documents, choose properties, type in their
department network drive, answer no to the do you want to move anything question.
3) Setup any extra mapped drives, add any network printers or shortcuts needed, move Favorites to Documents and
Settings\%username%\Favorites
4) Set their password to be changed the next time they logon.

User and Workstation Setup Checklist Revised: 7/8/2007