New Laptop Setup (and BitLocker)

On AD, move user to FPL.LOCAL/Crispin Way/Users/Laptops - OneDrive Sync, which moves folders to local. Wait half an hour or so. 

The sync process can be quickened by moving files from the Desktop, Documents, Pictures into a temp folder. 

Reboot desktop PC and login with user. This will take longer than usual and show a message “Applying folder redirection policy”.  

Verify redirected folders are back locally and ensure no important files are elsewhere. 

In OneDrive, “Sync and back up”, “Manage back up”, select Documents, Pictures, Desktop, and save changes. OneDrive sync will commence.  

On the desktop PC, sign into Edge with Flexipol account. This backs up Edge settings, bookmarks, saved passwords, and history. 

At the initial setup of the laptop, create a local account called Admin. 

Select No to all location, data etc. request settings, and set data to Required only. 

Get the serial number via “wmic bios get serialnumber” in cmd. 

Rename the laptop to the serial number and join the laptop to the domain FPL.LOCAL. 

In \\fpl-dt-01\BitLockerKey$, create a folder, and name it the serial number of the laptop. 

Right-click the C Drive in File Explorer, and either “Turn BitLocker On” or “Manage BitLocker”. 

Save the BitLocker key to a file, in the folder created at point 10. 

Via the laptop, the key can also be backed up onto the AD with PowerShell commands: PS C:\> $BLV = Get-BitLockerVolume -MountPoint "C:" and then PS C:\> Backup-BitLockerKeyProtector -MountPoint "C:" -KeyProtectorId $BLV.KeyProtector[1].KeyProtectorId. 

Uninstall unrequired software such as Teams for Home, any pre-installed anti-virus. 

Install Office, Outlook, Teams for Work, Epicor (Save Public Cloud Folder to C Drive), Webroot, Splashtop and any others. 

In Windows Update, Advanced options, check “Receive updates for other Microsoft products”, check for any updates in Optional Updates, and go back Check for Updates. Complete updates. 

Move the laptop on AD to Laptops – OneDrive Sync. After domain join, software uninstallations, installations and updates, restart.  

Logged in as the user, do point 5 and 6 on the laptop. 

Get the Model, Bit, OS Version, System Name, RAM (Installed Physical Memory) from System Information 

Get the serial number by tying “wmic bios get serialnumber” in cmd. 

Verify Anti-Virus, Password Security, Performance BitLocker key is on and the key is backed up, and OneDrive is synching correctly.