In the below, replace: "{x500}" with your internet-id (just the account name, no @ sign) "{enet_assigned_computername}" with the name that ENET assigned to the computer. Requirements: To Join Active Directory, OR use the Univeristy of Minnesota Microsoft Site Licensed software - INCLUDING the University of Minnestoa Windows Install/Upgrade Images, DVD's: The machine MUST be University of Minnesota Property, and Have its OWN license to run Windows (or MacOS). You should read this: http://www.enet.umn.edu/docs/policies/enet-policies.html Your "AD\enet-{x500}-admin" account may ONLY be used for administration of the machine (it is YOUR account and you may not share the account nor password with anyone else). It should NOT be used for normal day to day operation of the machine. You may have to go to AkerH 311 to set the password on your "AD\enet-{x500}-admin" account. Make sure the password is different than your regular account (and you don't use it anywhere else). Use your "AD\{x500}" account for day to day activities (like running web browsers and programs and downloading files and programs). Setting up a computer when you first turn it on: 1. Make sure all network connections are off. (this makes it easier to avoid making a Microsoft account). If installing from the University Windows UPGRADE site license DVD Choose Windows 10 Enterprise, Delete all partitions (including boot and recovery partitions) - this is to prevent accidental recovery of the machine to the old OS. Then let Windows install to the entire drive. 2. Name the first account "admin" (this account is created with administrative rights). NOTE: All local accounts will be deactivated when the machine is joined to Active Directory When asked to supply answers to the "personal questions": We highly recommend you don't supply real answers. Instead, make up a single random string and answer all of them with that. 4. DO NOT use the machine, nor install any software until you have successfully attached it to Active Directory. Attaching the machine to University of Minnesota Active Directory: 1. If you need to save anything: Back up any files on the computer that you may need later Make sure to export any address books and Bookmarks so you can re-import them. (All local accounts will be effectively disabled once the machine is attached to AD, and it will be complicated to get at the files). 2. Do the following to make sure the computer's internal name is set to: "{enet_assigned_computername}" Run: "control" (which is the old "Control Panel") change to details view, and goto: "System" -> "Advanced Settings" Click on the "Computer Name" tab. Click "Change" Set the computer name. If you have changed the computer name - Reboot. 3. Log in as A local user account with Administrative privileges ("admin"). --------------------------------------------- At this point - If you have any doubts that you did the above properly: - Please call us at 626-9800, so we can go over the steps with you, Before you do the next step. --------------------------------------------- 4. Connect the computer to its assigned jack (Turn Off Wireless - or you may run into problems joining it to AD). 5. Join the computer to the domain "ad.umn.edu" Run: "control" (which is the "Control Panel") change to details view, and goto: "System" -> "Advanced Settings" Click on the "Computer Name" tab. Click "Change" Set the domain to "ad.umn.edu". Log in with your AD administrative username: (enet-{x500}-admin) and password. At this point - If the computer did not seem to join - please check with us to make sure WE set up the computer account properly. 6. Reboot the computer once it joins. 7. Log in with your "enet-{x500}-admin" account. Once the desktop comes up completely - Logout. Then REBOOT. (this will finish applying policies, and you will be able to reboot when logged on once the policy updates are complete) You should now use your AD\{x500} account to log in (which will be a new account started from scratch as far as the computer is concerned - so you will have to copy back any important files and set up your preferences). 8. Let Us know (by email) that the computer has been attached to Active Directory (so we can verify it and update our records - AND remove any network restrictions placed on the machine). At this point you can also ask for access to the install share: http://repo.enet.umn.edu/enet/install-win/README.TXT