## BIOS/UEFI Windows 11 requires UEFI, TPM2.0 and Secure boot to be enabled. If necessary, make the following changes in the BIOS ... * change BIOS mode from Legacy to UEFI * change "enable Legacy ROM support" to disabled * enable Secure Boot * set SATA mode to AHCI if using SSDs * if the PC is to be installed in the rack, change the BIOS setting for POST Behavior > Keyboard Errors to disable keyboard error detection * check that Power Management, Wake on LAN/WLAN is enabled for LAN only ## W11 New Installation from ISO ### Windows 11 installation procedure using Win11_25H2_EnglishInternational_x64.iso ** rough notes to be tided up ** Language to install = English (United Kingdom) Time and currency format = = English (united Kingdom) Keyboard or input method = United Kingdom I would like to = selct "Install Windows 11" (other option is Repair my PC) tick to agree everything will be deleted Product key - click "I don't have a product key" We're getting a few things ready ... Select image - choose Windows 11 Pro N Accept the licence terms Select a location e.g. Disk 0 (probably only one anyway) At ready to install - click Install ## W11 Reset | Setting | Value | | --------------------------------------------------------------- | ----------------------- | | ** Windows 11 Reset ** | | | - navigate to Settings, then System > Recovery | | | - select Reset this PC | | | - choose Keep my files or Remove everything (see notes) | | | - choose Cloud Download or Local Reinstall (see notes) | | | - choose Just remove my files or clean the pc (see notes) | | | - at "Ready to Reset" - check details and click Reset | | Keep my files removes all apps and settings but keeps documents. Remove everything does a complete reinstall and will delete all data (called "complete wipe"). Cloud Download fetches the latest Windows 11 files from Microsoft’s servers over the internet, while Local Reinstall reuses the system files already present on the PC. Both options result in a fresh Windows installation, but Cloud Download is best for the most stable and up-to-date reset, especially if system integrity is in doubt or Local Reinstall fails. The option to just remove my files or clean the pc might only appear if the reset is being done as a repair (i.e. not selected within Windows). The clean my pc option is intended for instances when the pc is being prepared for sale or recycling. For a normal reinstall, the just remove my files option will be fine. The Reset process will restart the PC several times and reinstall Windows automatically. | Setting | Value | | --------------------------------------------------------------- | ----------------------- | | ** Windows 11 Config ** | | | - confirm language | English United Kingdom | | - confirm country/region | United Kingdom | | - confirm keyboard layout | United Kingdom | | - skip second keyboard | - | | - accept the licence agreement | Accept | | - at Let's name your device - enter machine name | e.g. 3070-JO | | - the pc will restart at this point | | | - at How would you like to set up this device | for Personal use | | - at "unlock your Microsoft experience screen" - only option is "Sign in" button | - | | - use shift F10 to open command line | - | | - type `start ms-cxh:localonly` press enter | | | - a blue pop-up window will display for username/password etc | - | | - enter username | e.g. "magellan" | | - enter password | e.g. "magellan" | | - confirm password | e.g. "magellan" | | - select three security questions e.g. | | | - what was your first pet's name? | PETNAME | | - what is the name of the city where you were born? | CITYNAME | | - what was your childhood nickname? | NICKNAME | | - then click "Next" to continue | | The machine then displays "Hi" then "Getting things ready for you ... don't turn off your pc" then "This may take a few minutes" ... | Setting | Value | | --------------------------------------------------------------- | ----------------------- | | - at "Let Microsoft and apps use your location" click "No" and "Accept" | | | - at "Find my device" click "No" and "Accept" | | | - at "Send diagnostic data to Microsoft" select "Required Only" and "Accept"| | | - at "Improve inking and typing" click "No" and "Accept" | | | - at "Get tailored experiences with diagnostic data" click "No" and "Accept" | | ## Remote Desktop and Wake on LAN Enable remote desktop so that the rest of the installation can be done via RDP | Setting | Value | | --------------------------------------------------------------- | ----------------------- | | - navigate to Settings, then System > Remote Desktop | | | - Click the slider to switch Remote Desktop "On" | | | - at the Enable Remote Desktop pop-up, click Confirm | | | - the PC name will be displayed | | | - go to Control Panel > Network & Internet > Network & Sharing Centre | | | - select Change Adapter Settings and select Ethernet adapter | | | - Right click and select Properties > Configure... | | | - Select Power Management tab and tick "Only allow a magic packet ..." | | * at "Let apps use advertising id" click "No" and "Accept" - didn't see this - - - - ## W11 Local Security Policy From ** Local Security Policy ** | Setting | Value | | --------------------------------------------------------------- | ----------------------- | | ** Network List Manager Policies >> Network n >> Properties ** | | | - Name | e.g. Draytek-Manor-House| Note that a reboot (or network refresh) may be needed for this change to take effect. - - - ## W11 Settings From Windows ** Settings ** Home System Bluetooth & devices Network and inetrnet personalisation apps accounts time and language gaming accessibility privacy and security windows updates | Setting | Value | | ------------------------------------------------------------------ | -------------------- | | ** System >> Notifications ** | | | | - in "Additional Settings | - | | - at "show the Windows welcome experience ... | No | | - at "suggest ways to get the most .... | No | | - at "get tips and suggestions when using Windows" | No | | ** System >> Power ** | | | - click on ** Power Mode ** to open options | | | -- at Plugged in, choose preferred mode | Best Power Efficiency | | -- at On battery power (LAPTOP ONLY), choose preferred mode | Best Power Efficiency | | - click on ** Screen, sleep & hiberante timeouts ** | | | - at Plugged in | | | -- Turn my screen off after | 3 minutes (DEFAULT) | | -- make my device sleep after | 10 minutes (DEFAULT) | | -- make my device hiberate after | Never | | - at On battery power (LAPTOP ONLY) | | | -- Turn my screen off after | 3 minutes (DEFAULT) | | -- make my device sleep after | 10 minutes (DEFAULT) | | -- make my device hiberate after | Never | | ** System >> Activation ** | | | - Check W11 Pro licence is Active | Active | | ** System >> About - scroll down to Related Links ** | | | - in "Domain or Workgroup" change Workgroup | MAGELLAN | | - go to "Advanced System Settings" >> Performance >> Settings | - | | -- in Visual Effects select Adjust for best performance | Adjust for best performance | | ** Network & Internet >> Ethernet ** | | | - check network name shows as set using Local Security Policy above | | | - set Network profile type | Private | | ** Personalisation >> Background ** | | | - choose Solid Colour and select a unique colour | e.g. Moss | | ** Personalisation >> Colours ** | | | - set Transparency effects | Off | | - set Accent colour | Automatic | | ** Personalisation >> Lock Screen ** | | | - set "Personalise your lock screen" | Picture | | - choose a default picture | | | - at "Get fun facts, tips, tricks ... on your lock screen" | No | | - set "Lock screen status" | None | | ** Personalisation >> Start ** | | | - set "Show recently added apps" | Off | | - set "Show the most used apps" | On | | - set "Show recommended files in Start, recent files ..." | Off | | - set "Show recommendations for tips, shortcuts ..." | Off | | - set "Show account-related notifications" | Off | | ** Time & Language >> Date & Time ** | | | - Time zone | (UTC +00:00) Dublin, Edinburgh, London (DEFAULT) | | - Set the time automatically | Yes (DEFAULT) | | ** Privacy & Security >> Recommendations & offers ** | | | - set "Recommendations & offers in Settings" | Off | | - set "Show notifications in Settings" | Off | | - set "Improve start and search results" | Off | | ** Privacy & Security >> Search ** | | | - set "Show search highlights" | Off | | - set "Search my accounts" > "Microsoft Account" | Off | | - set "Search my accounts" > "Work or School account" | Off | - - - ## W11 Control Panel From ** Control Panel ** | Setting | Value | | ----------------------------------------------------------------| --------------------------- | | ** Control Panel ** | | | - View By | Small Icons | | ** Fonts >> Related Settings >> Adjust ClearType Text ** | | | - Run ClearType wizard | | - - - ## W11 File Explorer From ** Start Menu >> File Explorer ** Note: if setting up laptop or PC to be based away from Honiton office, map by server IP address (e.g. replace 9020-SERVER with 192.168.143.101) | Setting | Value | | ---------------------------------------------------- | ---------------------------- | | ** ... >> Options >> View ** | | | - Always show icons, never thumbnails | Yes | | - Display the full path in the title bar | Yes | | - Hide extensions for known file types | No | | - Launch folder windows in a separate process | Yes | | - show sync provider notifications | No | | - Use Sharing Wizard | No | | ... and click "Apply to Folders" | | | ** ... >> Options >> General ** | | | - Open File Explorer to | This PC | | - Show files from Office.com | No | | ** ... >> Map Network Drive ** | | | - Drive | Z: | | - Folder | \\\\9020-SERVER\data | | - Reconnect at sign-in | Yes | | - Connect using different credentials | Yes | | - Enter your credentials to connect to | magellan/magellan | | - Remember my credentials | Yes | | ** ... >> Map Network Drive ** | | | - Drive | X: | | - Folder | \\\\9020-SERVER\xampp-web | | - Reconnect at sign-in | Yes | | - Connect using different credentials | Yes | | - Enter your credentials to connect to | magellan/magellan | | - Remember my credentials | Yes | - - - ## W11 Recycle Bin Properties From ** Recycle Bin >> Properties (Right Mouse) ** | Setting | Value | | --------------------------------------------------------------- | ----------------------- | | ** General ** | | | - Display delete confirmation dialogue | Yes | - - - ## W11 Taskbar From ** Taskbar (Right Mouse Click) ** or ** Settings >> Personalisation >> Taskbar ** | Setting | Value | | --------------------------------------------------------------- | ----------------------- | | - Show Widgets | No | | - Show Task View button | No | Remove the following apps from Taskbar (by right mouse clicking and selecting ** Unpin from Taskbar **) * Microsoft Copilot * Microsoft Store * Outlook (new) - - - ## W11 Software ### W11 Unnecessary Software From **Start Menu >> Settings >> Apps >> Apps & Features ** uninstall the following (if present) * Films & TV * Microsoft OneDrive * Xbox * Xbox Live * Outlook (New) * Weather * News Leave this * Microsoft Edge WebView2 Runtime (may be needed by Teams) - - - ## VPNs - NOT DONE From ** Start Menu >> Settings >> Network & Internet >> VPN >> Add VPN Connection ** add any VPNs required. e.g. for GM * VPN Provider = Windows (built in) * Connection Name = GM VPN * Server = gmjs.dynns.com * VPN Type = PPTP (point to point tunnelling protocol) * Type of sign-in info = username and password * username = see mdwiki * password = see mdwiki * Remember my sign-in info = Yes and then ensure VPN does not use remote router for ... ** Start Menu >> Settings >> Network & Internet >> VPN >> Change Adapter >> Settings >> Adapter (e.g. GM VPN) >> Properties >> Networking >> TCP/IP v4 >> Properties >> Advanced >> IP Settings ** * Use default gateway on remote network = No - - - ### Firefox Install Firefox 64-bit, set as default browser and use following settings | Setting | Value | | --------------------------------------------------------------- | ------------------------------------- | | ** More Tools ... >> Customise Toolbars ** | | | - Menu Bar (via rightclick option on toolbar) | Yes | | - Search Bar | Add search bar in toolbar | | ** Settings >> General ** | | | - Downloads | Always ask you where to save files | | ** Settings >> Home ** | | | - Homepage and new windows | Custom URLs (http://mdwiki.wxserver/) | | - New tabs | Blank page | | ** Settings >> Search ** | | | - Default Search Engine | DuckDuckGo | | - Show search suggestions | No ??? | | ** Settings >> Privacy & Security ** | | | - Delete cookies and site data when Firefox is closed | Yes | | - Ask to save logins and passwords for web sites | No | | - Save and fill payment methods | No | | - Save and fill addresses | No | | ** Settings >> Add-Ons ** | | | - install AdBlock Plus | | | - install Awesome Screenshot Plus | | ### Other Software Installed using script * 7.Zip * GIMP * LibreOffice * Notepad++ * VLC Player Not installed * Adobe Acrobat Reader DC * Fujitsu Scanner Software * Gigasoft GBM * Samsung Printer drivers * WinSCP Optional (e.g. not required on servers) * AnyDesk * Norton Security (max 10 licences) * Thunderbird (for machine to be used for email) * VNC Viewer - - - - Add the following apps to Taskbar (by right mouse clicking the application shortcut and selecting ** Pin to Taskbar **) * Firefox * Thunderbird ### Other Tasks * set default apps