Lenovo Imaging Checklist

Transcription

1 *Note: If this is a re-image, it s recommended getting into setup and clearing the Security Chip. PRE-INSTALLATION BIOS (When powering up, hit F1 at the Lenovo Logo screen) For all Lenovo Laptop models: Disable Secure Boot. o (Security Secure Boot Disabled) Enable UEFI Network Stack. o (Config Network UEFI IPv4 Network Stack Enabled) Change to UEFI Boot Sequence. o (Startup UEFI/Legacy Boot UEFI Only) Ensure the Security Chip is enabled. o o (Security Security Chip Security Chip Enabled) If this is a re-image, clear the Security chip by going to: (Security Security Chip Clear Security Chip Hit Enter) Restart machine and continue to OS INSTALL. For all Lenovo Desktop models: Change SATA Operation to AHCI. o (Devices ATA Drive Setup Configure SATA As AHCI) Enable UEFI Network Stack. o (Devices Network Setup PxE IPv4 Network Stack Enabled) Disable Secure Boot o (Security Secure Boot Secure Boot Disabled) Ensure the Security Chip is enabled. o (Security TCG Feature Setup TCG Security Device Firmware TPM o (Security TCG Feature Setup Security Chip 2.0 Enabled) o If this is a re-image, clear the Security chip by going to: (Security TCG Feature Setup Clear TCG Security Feature Hit Enter) Change to UEFI Boot Sequence. o (Startup Make sure Boot Mode is set to UEFI Only ) Restart machine and continue to OS INSTALL.

2 OS INSTALL BOOT OPTIONS (When powering up, hit F12 at the Lenovo Logo screen) Select Onboard NIC (IPV4) to start the network boot. o Note: On Desktop machines it will be listed as UEFI: PXE IP4 o Note: On Laptop machines it will be listed as: PCI LAN Press ENTER for network boot service when prompted. o This screen will appear after the Media Presence check, and may flash quickly. o If missed, re-enter the boot options menu and select Onboard NIC (IPV4) again. At the Task Sequence Wizard, enter the current imaging password. Select the Current Faculty Staff Image X.X task sequence. o The version number may change. Change Computer Name. o If his is a brand new machine, no action is required. o If the computer name has an old organization name (not the machines serial#), simply change it to a placeholder. It will be overridden during the imaging process. Select correct Organizational Unit (OU) for the machine. o This can be found by searching the users name in the staff directory ( and locating their Department Name. o If unsure, ask for assistance from any ADM available. Select Finish.

3 POST-INSTALL LOCAL PCADMIN LOGIN (Always attempt this login before asking for an ADM) Login as the local pcadmin using the current pcadmin password. o Username:.\pcadmin o The.\ is required to target the local machine for login, rather than the PSU Domain. PSU ADM LOGIN (Only if the local pcadmin login is unavailable to you) Ask for assistance from any ADM available. o You will require that specific ADM to login again if the machine becomes locked. SYSTEM DEPLOYMENT PREPERATION *Note: It may take a minute after initial startup for the Start Menu Search to index. Modify power options to prevent the machine from locking during post-install. o There are two ways of getting to the power options menu: Start Menu Search: Power Options Power & Sleep Settings WinKey + R Type in: control panel Power Options o Change power options to Never Turn Off Screen and Never Sleep. These options are account based, and will not affect the end user. Download and Install the Lenovo System Update Utility o Go to either goo.gl/arvmwt or just search for Lenovo System Update Utility o Click through the installer (as of there is no bundled software with this installer so you should be able to click straight through) o Launch the program and hit Select all on the Critical updates tab, the Recommended updates tab, as well as the Optional updates tab. Continue by clicking Next. o A message will pop up, just click Yes. Begin checking for Windows Updates. o Start Menu Search: Windows Updates Check for updates (This will take a few minutes.) o Click on Check online for updates from Microsoft Update. o When it appears, click on Restart now Install Java-v7.121 Runtime Environment. o Grab a Hiren boot key or ask someone in the shop if they have the java installer. o Enter an Elevated Command Prompt by typing CMD into the start menu, left clicking Command Prompt and clicking Run as Administrator o Type in the drive letter of the hiren key or the drive in which the java installer is located o followed by a colon (Ex: D: ) and hit enter.

4 POST-INSTALL Contd. o Type in cd followed by the directory to which the install.bat file is located ( Should be in /Java 8u121 Facstaff/win/ folder.) and hit enter. o Type install Uninstall Lenovo System Update Utility (We do this to lessen the possibility of an update of the BIOS by the end user which can cause a BitLocker Encryption lockout of the system.) o Type Program into the start menu and click the top result. o Locate Lenovo System Update Utility in the list of installed programs and click it. o Click Uninstall and follow the prompts to uninstall. Finish Windows Updates. o Start Menu Search: Windows Updates o Ensure that there are no updates missing before checking off. Start Bit Locker Encryption o You MUST have an ADM login to enable Bit Locker Encryption. Doing so without being logged in as an ADM will result in a system error later down the line. o Start Menu Search: Manage Bitlocker Return to Tom, Will or Hunter for deployment on campus. Good Job!!!

5