WXP Image setup for use with SysPrep

Allow Restricted users to update the clock and add/remove device drivers
Go to Control Panel/Administrative Tools/Local Security Policy
Under Local Policies / User Rights Assignment, edit the key Change the system time

Add Everyone

Also under User Rights Assignment, edit the key Load and unload device drivers

Add Everyone

This one still needs to be verified!

Copy the Windows Explorer link from [Start]Programs/Accessories to [Start]Programs
In Internet Options, under the |Advanced| tab, set:

Use inline AutoComplete
Empty Temporary Internet Files when browser is closed.

Set IE to trust IBM for Java

2. Launch IE and go to http://mail.krtservices.com

3. Open a mail file (any mail file)

4. Click [Always] on any security pop-ups for IBM or International Business Machines

Give Power Scheme access to EVERYONE -

2. Open RegEdit. You'll be modifying these keys:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ControlsFolder\PowerCfg\GlobalPowerPolicy
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ControlsFolder\PowerCfg\PowerPolicies

3. Locate the key, Right-Click on it, and select Permissions...

4. Click [Add...]

Type in everyone and click [Check Names]
Click [OK]

5. With the new Everyone entry selected, check to Allow / Full Control

6. Click [OK]

Configure MS Firewall

Right-click on the Network Connection and select Properties

On the |Advanced| tab, check Protect my computer and network by limiting... and then click [Settings]
On the |ICMP| tab, check to Allow incoming echo request

Hide all sensitive files

2. Open Windows Explorer

3. Select View/Status Bar

4. Select Tools\Folder Options, and, on the |View| tab:

Uncheck Automatically search for network folders and printers
Uncheck Display the contents of system folders
Check Hidden files and folders / Do not show hidden files and folders
Check Launch folder windows in a seperate process
Check Hide protected operating system files
Click [Apply]
Click [Apply to All Folders]

Move all Start Menu stuff to C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU and move everything people don't need to see into the Accessories sub-folder
Clear any [Start] / Programs / Startup entries that are unnecessary TSR's
Look around and make sure everything's like you want the Default User set up. Double check the Start Menu.
Log out.

Logged in as TEMP, set the Default Profile

Logged in as TEMP, set the Default Profile

Unhide all system files

In Windows Explorer, go into Tools / Folder Options, |View|
Select or deselect as appropriate so all system files and folders can be seen
Click [Apply], then click [Apply to all folders]

Go into System Properties, |Advanced| and click User Profiles [Settings]
Click on the TempAcc account and click [Copy to]
Click Copy profile to [Browse]

WARNING: DO NOT SELECT ALL USERS!!!

Browse to and select C:\Documents and Settings\Default User, and click [OK]
Click Permitted to use [Change]
Type everyone and then click [Check Names] - verify that the name was found (the first letter will be capitalized and "everyone" will be underlined.
Click [OK], Click [OK], verify overwrite by clicking [Yes]

Preparation Stuff - logged in as Local Administrator

B. Log in as Local Administrator, hit <CTRL>+<ALT>+<DEL> twice at the Welcome Screen.

C. Delete Temp user and all associated files

4. Go into System Properties, |Advanced| and click User Profiles [Settings]

5. Click on the User account and click [Delete]

F. Set PageFile to clear itself on shutdown:

7. Start Regedit.

8. Navigate to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management

1. Select ClearPageFileAtShutdown from the list on the right.

2. Right-click on it and select Modify.

3. Change the value to 1 to enable.

4. Reboot your computer.

E. Reboot the computer again to clear the pagefile and move it to a contiguous block of the drive.

F. Disable and clear System Restore

7. Go into System Properties, |System Restore| and check Turn off system Restore and click [Apply]

8. Go open and empty the System Volume Information folder at the root of all drives (C: may not allow you to open the folder, verify that the size is 0 bytes)

I. Run Drive Cleanup (in the drive's Properties, on the |General| tab) and kill everything possible

Do NOT clear Office Setup Files (located at the root of the drive with the most available space as a hidden, protected folder named %)

A. Run CCleaner Portable from it's folder inside Tech Tools\Utilities

B. Defrag

Use SysPrep and image the boot partition

B. Copy the contents of the .CAB file located in \support\tools\deploy.cab on the Windows XP CD to the local hard drive - %rootdrive%:\SysPrep

Also located at ftp://Utility.KRTServices.com/Utilities - Windows/Sysprep - the entire contents of the directory

Has to be in a folder named SysPrep at the root of the drive Windows is installed on for automatic removal after startup.

A. Make sure the machine is a member of a Workgroup instead of a Domain

B. Verify again that there aren't any drivers listed in Add / Remove Programs

C. Open device manager and uninstall or disable any chipset drivers

D. Once everything has been done and it is ready, open a command prompt and switch to the SysPrep directory

E. Run the following commands, in order:

sysprep -clean

sysprep -mini -activated -quiet

A. In the System Preparation Tool dialog box, verify that the MiniSetup, and Pre-activated flags are set and Shutdown: is set to Shutdown before clicking [Reseal]

B. Verify by clicking [OK]

C. Image the drive for distribution using bootable imaging software

Restoring

Restore the image to C: - Follow this procedure ()

Temporary Notes

I. Right-Click the Task Bar and select Properties

B. On the |Taskbar| tab, select Show Quick Launch

Clean it up and copy Windows Explorer to it (under Accessories)

C. On the |Start Menu| tab, click [Customize] next to Start Menu

On the |Advanced| tab, de-select Highlight newly installed programs
Set Control Panel to Display as a menu

IV. Go to Display Properties and, on the |Desktop| tab, click [Customize]
E. On the |General| tab, de-select Run Desktop Cleanup Wizard...
F. Check everything under Desktop Icons

I. Uninstall Junk
B. Google Desktop
C. Digital Line Detect
D. Modem Helper
E. Net Waiting
F. URL Assistant
G. Anything else that's unnecessary
VIII. Consolidate Manufacturer items on Start Menu and move minor items into Accessories
IX. Install Microsoft Office
J. Kill the Language Bar
XI. Run Windows Update
L. Upgrade to Microsoft Update
M. Delete Windows Update from Start Menu
N. Install everything, but do Video Driver seperate from anything else
O. Run, reboot, run again - continue until there aren't any more updates.
P. Check again for garbage on the Start Menu and Quick Launch bar
XVII. Set Windows Automatic Updates to run every day at 3 AM

I. Install UltraVNC Application - set the App to run as a service
B. During Setup

Do not set it to use the MS Logon II
Set it to run as a service
Set it to Start / Restart
Associate .vnc files

C. Use the appropriate Administrator Password when prompted for the default password
D. After setting the default password and closing the Admin Properties dialog, use the Task Manager to terminate WinVNC.exe
E. Launch the Server from the Start Menu - Tell MS Firewall to Always Allow it!
F. If a Domain member, reopen Admin Properties and set up Domain authentication

Check Require MS Logon
Check New MS Logon
Click [Configure MS Logon Groups]
Use Domain Admins with full access

G. Copy the Single-Click executable (Remote.exe) into the Start Menu UltraVNC folder

I. Remove undesired items from Dynamic Start Menu (Remove From This List)

All Documents By Author By Category By Alternate Name Review Status Help