HUB International: Computer Imaging & Reimaging July 2016

Agenda Before You Go & Follow Up Prepping & Downloads Imaging Imaging Check List Prepping & Downloads Creating a Boot Drive for Imaging Downloading Desired Imaging Data for Boot Drives FileZilla Imaging Imaging New “Out of the Box” Devices Prep for Re-Image Re-Imaging an Existing Device Encryption Familiar Apps Post Installation

Before You Go & Follow Up Imaging Check List [cont’d] You must contact end-user and confirm date, time, and location. Before you go onsite make sure that you have HUB imaging thumb drives and documentation Before you start onsite pre-imaging you will need: New computer’s serial number What region the computer will be assigned Onsite: Follow documented processes in this document

Before You Go & Follow Up Imaging Check List [cont’d] Follow Up: These are critical and must be completed on site before you leave Manually migrate data and user settings from old laptop to new laptop during refreshes and break/fix where old data is accessible Add folder to the root C drive for users who scan and name “XXXXX” Removed IPv6 from both LAN and Wireless under Network Settings / TCP/IP Remove the “one off” account which inadvertently gives users local admin rights from the User Accounts on the computer

Before You Go & Follow Up Imaging Check List [cont’d] Follow Up: cont. Citrix version checked and updated Printers added depending on Citrix or non-Citrix protocol Performed a GPUPDATE /FORCE to bring down all group policies Mapped all user network drives Internet Explorer version is 11 and configured correctly to be backward compatible with older websites BITLOCKER must have completed all encryption before handing the computer over to the user

Prepping & Downloads Creating a Boot Drive for Imaging USB Boot Drives will only need to be created when you re-image an existing machine. How to Create a “Bootable” USB Drive: You will need a thumb drive with the minimum capacity of 16GB. Insert a USB flash drive into a running computer. Logon with Admin rights Open a Command Prompt [CTRL – R]. At the prompt type diskpart. At the new command prompt, type list disk to determine the USB flash drive number or drive letter, and then hit ENTER.

Prepping & Downloads Creating a Boot Drive for Imaging How to Create a “Bootable” USB Drive: cont. The list disk command displays all the disks on the computer. Note the drive number or drive letter of the USB flash drive. (Hard drive of Computer is normally listed as Disk 0, usb is normally Disk 1) At the command prompt, type select disk <X>, where X equals the drive number or drive letter of the USB flash drive, and then hit ENTER. Type clean, and the hit ENTER. This command deletes all data from the USB flash drive. Type create part prim to create a new primary partition on the USB flash drive, then hit ENTER.

Prepping & Downloads Creating a Boot Drive for Imaging How to Create a “Bootable” USB Drive: cont. Type format fs=ntfs quick to format the partition, then hit ENTER. Type active, and hit ENTER. Type exit, and hit ENTER. The USB is now ready for the imaging data.

Download Data Location Downloading Desired Imaging Data for Boot Drives Create a “Bootable” USB with the minimum capacity of 16GB Time based on bandwidth and USB Port/Drive versions Locating & Downloading the Correct Imaging Data: Use Filezilla to Download Imaging Data Server: sftp.hubinternational.com User: images-user@images Password: E4HA&uG&

FileZilla Known Issues In order to see the images the techs will need to Create a New Site under 'File - Site Manager' and Change the Protocol to SFTP - SSH File Transfer Protocol.

Imaging New “Out of the Box” Machines New machines are ready to be imaged straight out of the box. Set up machine to power and connect to the network via Ethernet Boot machine – Welcome to the Task Sequence Wizard will appear Select NEXT

Imaging New “Out of the Box” Machines [cont’d] Task Sequence list will appear. Choose Task according to the Model of the machine NEW T460 or T460s Series Connect computer to the Network and when prompted to select correct Task Sequence “New From Factory Imaging_T460 New”. NEW M900 “New From Factory Imaging_900 Series Models”.

Imaging New “Out of the Box” Machines [cont’d] Target Deployment Region window will appear. Chose the region for the machine from the drop down menu Selecting the region names the computer and will join it to the domain in the regions selected OU. It will also name the computer based on the following naming convention: Example: MIDLPF00GT02 MID = represents the region L or D = laptop or desktop PF00GT02 = computers serial number It is important to choose the correct region

Imaging New “Out of the Box” Machines [cont’d] When complete, have the user login. Lync and Outlook will auto populate. Assist or instruct the users with adding printers and any applications unique to their needs in the region as requested or necessary. This will take approximately 45 minutes for the computer to complete these tasks.

Re-Imaging an Existing Device Before Beginning You will need a Bootable USB. (See How to create a “Bootable” USB drive) Each image is approximately 11GB and will take time to download based on bandwidth and port speed. It is advisable to create the image boot drive before you go to the site.

Re-Imaging an Existing Device Before Beginning Identify the model of the system experiencing the issue. Download the image from the server. It is important the correct image is downloaded, so double check. Copy the appropriate folder to your local drive. Then copy the file contents in the folder to your Bootable USB Model(s) Image to Use Lenovo M32 Re-Image_M32 Thin Lenovo T450, X250 Re-Image_50 Series Models Lenovo M93, T430, T440, X230, X240 Re-Image_M93_40 Series and Older Models Lenovo M900 Re-Image_M900 Series Models Lenovo T460 Re-Image_T460 Series Model

Re-Imaging an Existing Device Before Beginning Re-imaging should only take place as a last resort. Make sure the computer has a stable wired network connection and is plugged into power Laptop cannot be in a docking station and the Wi-Fi should be turned off. Make sure to back up all the users’ data and settings. This can be backed up to the Users U: drive or to a USB Drive. Some users may have DRUVA backup software installed.

Re-Imaging an Existing Device Before Beginning [cont’d] Show hidden folders and files as well as protected operating files: a. Folder Options by clicking the Start button, b. Chose Control Panel, c. Chose Personalization d. Chose Folder Options. Click the View tab. Under Advanced settings, chose show hidden files and folders Uncheck Hide protected operating system files, then click OK. (This must be set back when done) Items to be backed up: Local C:\Users\firstname.lastname\: a. Contacts, Desktop, Documents, Favorites, Music, Pictures, Videos b. Under AppData\Roaming\Microsoft: Proof, Signatures, Spelling, Stationery, Templates, Uproof c. If the user uses Google Chrome: Under AppData\Local: Google

Re-Imaging an Existing Device [cont’d] Place the USB drive in the USB port on the computer and RESTART the computer. Press F12 as soon as the Lenovo boot screen appears Select the USB drive as an alternative boot device. Once you boot into the SCCM Windows PE environment, clean the computers internal drive before imaging. Hit F8 at this window to open a Command Prompt window. You may need to use Function F8 Type diskpart. At the command prompt, type select disk 0 and then Click ENTER

Re-Imaging an Existing Device [cont’d] Type clean, and the click ENTER. This command deletes all data from the computers’ internal hard drive. Type create part prim to create a new primary partition on the drive and then hit ENTER. Type format fs=ntfs quick, to format the partition and then hit ENTER. Type active, and then hit ENTER. Type exit, and then hit ENTER. Select Cancel and restart the computer. Reboot and hit F12 and chose to boot from the USB drive, now start the imaging process.

Re-Imaging an Existing Device [cont’d] 18. Select Next if prompted. 19. The screen should show the name of the re-image file you are trying to use. Make sure it matches the device and select next or ok. NOTE: During the imaging process, you CANNOT remove the USB drive. It must stay in the device until the process is completed. 20. When prompted with login screen: Shutdown the computer, remove the USB drive, and restart.

Encryption Using BitBlocker® Control Panel Encryption takes 1 to 1.5 hours depending on size of the machines’ hard drive If it prompts for BitBlocker, you may have to restart the machine without any peripherals attached.

Application List Be familiar with the following applications: Acrobat Reader Acrobat Pro BenefitPoint CRM DuckCreek EPIC OracleFusion SEMCAT VDI/Citrix/XenApp/XenDesktop

Post Image Installation Verify encryption is complete Perform a GPUPDATE /FORCE to bring down all group policies. You must be logged is as the user as updates are tied into the user’s profile. Static IP address (unlikely) Certain PCs require static IP address, which must be reapplied after image/replacement. Check on the machine being replaced or with the user for the required static IP address. This is an unlikely scenario that should affect very few users. Setup Users profile and restore all user settings and files. On laptops, add local printers and map any needed drives. Power Settings – If you use Balance setting the plan will be overwritten by policy. Choose “Other” and change lid and others to “Never”

Post Image Installation Updates are run every week Tuesday or Wednesday nights. Custom Software If the user’s old/reimaged machine had a non-standard piece of software installed, you will need to work with the user to determine installation media and product keys to reinstall on the replacement machine. Desktop Shortcuts Citrix VPN Access Gateway – Log into http://access.hubinternational.com for the user and run the install. Answer the scan question with “Always”. You will have to log into the VPN three times to get the full software to install fully and for the user to be able to logon. This is only required for laptop machines. VPN may take 3 launches to completely install. Xen Citrix Desktop – http://Xen.hubinternational.com is created under favorites in IE once Group Policy is applied. Copy to desktop for Staff that use Citrix.

Post Image Installation Installed Applications These are software installations that should have been installed automatically as part of the imaging process. Check to ensure software is installed and up to date. System Center Endpoint Protection – make sure a current Virus definition version is installed. Runs in the AM upon startup. Direct Access – Updates, if the computer is part of the security group for Direct Access Connection when gpupdate /Force is run from Command Prompt. Windows Updates – Check to make sure currently available Windows Updates have been installed.

THANK YOU! HUB International HelpNet Site For more information, please visit: HUB International HelpNet Site THANK YOU!