SOP 004 - Milrose - How to Setup a Laptop, Desktop or Tablet

Instructions for IT staff to set up and configure a laptop, desktop or tablet. It ensures that all devices are prepared consistently with inventory tracking, standard company applications, security patches/updates, and network/domain configurations.

This applies to new and refurbished PCs that require set-up and configuration for Milrose office users.

Initializing Steps

1. If you have a new device (out of the box) skip to step 8 else continue
2. If this is a device upgrade, make sure to backup all files, browser favorites and password.
   1. Make sure to check device root for additional folders
3. Plug in the AC adapter and turn on the device.
4. Following instructions may vary slightly depending on windows version and device type (Lenovo laptop, surface etc.)
5. Boot from our standard windows 11 upgrade flash drive
6. Delete all the existing drive partitions
7. Perform a fresh installation of the windows 11 operating system
8. Follow the prompts to finish the installation and perform all patch installations

OS Setup Steps

1. Plug in the AC adapter and turn on the device.
2. Follow the prompts and connect to the Milrose network through Wi-Fi or a LAN connection
3. In the “Let’s name your device” page set the device name using the standard below
   1. Laptops - PCN-(serial number)
   2. Desktops - PCD-(serial number)
   3. Tablets - PCT-(serial number)
4. In the “How would you like to setup this device?” page
   1. Select “Setup for work or school”
   2. Choose “Sign-in options”
   3. Select “Domain join instead”
5. When prompted for “Who’s going to use this device?”
   1. Enter “Admin”  and use the standard admin password from IT Glue
6. On the next page choose three arbitrary security questions and answer them all with “milrose” 
7. Skip the “face sign in” page
8. Confirm privacy settings
9. Skip the “Protect your device" page
10. Allow the pc some time to perform windows update. This will take around 30 – 60 minutes

Add the PC to the Domain and proper OU 

1. Add the PC to the Milrose domain with the steps below
2. Open the Settings App
3. Head to System > About > Domain or work group
4. From the Computer Name tab select Change
5. Select Domain and enter the domain address below
   1. milrose-ny.com
6. Enter the Domain Administrator credentials from IT Glue and restart when prompted.
7. Add the user’s pc in the same OU as their office location
   1. Ie: User located in the Milrose Connecticut office will be in the organizational unit below
   2. Milrose-ny.com > Milrose > CT > Computers

Install the Basic Milrose Applications 

1. Lenovo System Update
2. Lenovo Dock manager
3. Manage Engine Agent
4. Google Chrome
5. Office 365
6. Mimecast for Outlook
7. Adobe Acrobat Reader
8. Cisco Secure Client VPN
   1. Enable Cisco Secure Client settings to download the application
   2. Make sure to disable “Block Connections to Untrusted Servers”
      1. Open Secure Client
      2. Click on the gear(settings) icon at the bottom left
      3. AnyConnect – Preferences – Uncheck “Block Connections to Untrusted Servers”
9. Install Milrose approved apps requiring funding or additional licensing
   1. Example:
      1. Bluebeam, Adobe Acrobat, AutoCAD, QuickBooks, Wave, Certinia, Deltek Ajera, etc.
   2. Get User’s manager approval and IT Director approval before installing these apps

Office Printers

1. Set up the printers & drivers for the user. 
   1. Below is an example for setting up printers for Milrose NYC office users.
2. Log on to the pc with the domain administrator account
3. Head to Settings – Bluetooth & Devices – Printers & Scanners
4. For all 4 office printers listed below follow steps 4 & 5

1. Click on Add device
2. Select the printer and wait for it to be added

Updates/patches

Perform all the patches below

1. Open the Lenovo dock manager app while the pc is plugged into a dock and perform patches
   1. If the sub-companies’ pc standard is different (dell, surface etc.), install the appropriate system update tool.
2. Open the Lenovo system updates app and perform all recommended and critical updates
3. Open Windows settings – Windows Updates – Check for updates
4. Open Windows settings – Windows Updates – Advanced options – Optional patches

Asset ID

1. Retrieve an asset tag sticker from Adolfo
2. Place the sticker at the bottom right of the PC near the CPU sticker as indicated below

1. Open the endpoint central web UI
2. Head to Inventory – Computers
3. Click on the magnifying glass at the top right and search for the computer name you created in the initializing step

1. Click on the computer name and scroll down to custom fields
2. Next to “Milrose Asset ID” click on the edit pencil and enter the value found on the sticker as indicated below

User Initial Onboarding 

1. Set up a meeting with the user to assist with logging in and finalizing the pc setup
   1. PC login/AD, VPN, MS Office, Mimecast, Adobe Acrobat, Freshdesk Portal, myApps

To perform the tasks in this SOP you will need a domain administrator or a user administrator account in AD and O365.