...
Press Windows + R key to open the Run window.
Type gpedit.msc in the text box field and press Enter.
In the left panel, navigate to the following location:
Computer Configuration > Administrative Templates > Windows Components > Credential User Interface
In the right panel, double-click Prevent the use of security questions for local accounts
In the pop-up window, select the option of Enabled, click Apply then click OK
Create libacct Local Admin User
Open Control Panel > User Accounts > Manage another account
Click Add someone else to this PC
Select I don't have this person's sign-in information, then Add a user without a Microsoft account Local Users and Groups
Can be reached by pressing Windows + R, typing lusrmgr.msc in the text field and press Enter
Navigate to the Users folder
Right click in the blank area below the current users and select New User… from the menu
Enter "libacct" for the username user name field and use the current libacct password found in LastPass for the password field
Once created, click the new account, select Change account type and choose Administrator
When logging into the new account, the user will be prompted to choose privacy settings for the device
The only option that should be turned on is Location
Click Accept Uncheck the “User must change password at next logon” option and ensure the “Password never expires” option is checked
With the Local Users and Groups window still open, navigate to the Groups folder in the left most pane of the window
Double click Administrators and select the Add… button
Type “libacct” in the bottom text field and press Enter
Click Apply and close the Administrators Properties window
field
Create LibMAX Local Standard User
Open Control Panel > User Accounts > Manage another account
Click Add someone else to this PC
Select I don't have this person's sign-in information, then Add a user without a Microsoft account With the Local Users and Groups window open, navigate to the Users folder
Right click in the blank area below the current users and select New User… from the menu
Enter "LibMAX" for the username user name field and use the current LibMAX password found in LastPass for the password field
Once created, click the new account and confirm that the account is a Standard User
When logging into the new account, the user will be prompted to choose privacy settings for the device
The only option that should be turned on is Location
Click Accept
Make MAXHUB a Standard User and Set a Password for it
While signed with the MAXHUB user account, open Settings > Accounts > Family & other users
Select the MAXHUB account, click Change account type and change it to Standard User
Navigate to Settings > Accounts > Sign-in options
Select Password and click Add
Enter in the standard password that can be found in LastPass and leave a space in the hint field field
Uncheck the “User must change password at next logon” option and ensure the “Password never expires” option is checked
Set a Password for the MAXHUB user and make it a Standard User
With the Local Users and Groups window open, navigate to the Users folder
Right click on the MAXHUB user and select Set Password… from the menu
A warning prompt will appear if signed into the MAXHUB user at the time, but this can be disregarded and the Proceed button can be selected to continue further
Use the current MAXHUB password found in LastPass for the password fields and select OK once finished
With the Local Users and Groups window still open, navigate to the Groups folder in the left most pane of the window
Double click Users and select the Add… button
Type “MAXHUB” in the bottom text field and press Enter
Click Apply, close the Users Properties window and double click Administrators
Select MAXHUB and click the Remove button
Click Apply, close the Administrators Properties window and close the Local Users and Groups window once finished
Windows Settings, Software Installations and Updates
NetReg the Device
Follow the most current instructions on OU’s IT support website found here: https://itsupport.ou.edu/TDClient/35/Norman/KB/ArticleDet?ID=135&SIDs=259
When prompted to sign in, make use of the most current credentials in LastPass to NetReg devices with a wired connection
Info |
---|
While this can all be achieved on the device itself, completion of these steps can also be done on a separate device if the user cannot reach the OU NetReg page on the MAXHUB |
Join Device to Domain
While signed in to the libacct admin user, press the Windows key, search for the “View advanced system settings” control panel shortcut and select it
Navigate to the Computer Name tab and select Change…
With Domain selected, enter the sooner domain address (sooner.net.ou.edu) into the Domain field and then select OK
A prompt should appear asking for a username and password. This will require credentials for an account that has not reached it’s limit of registered devices
Once complete, a greeting will appear that can be closed out
Info |
---|
If the device cannot join the domain due to a DNS error, it could be due to the device not being NetReged properly or could need more time for the system to register the device. If this error appears, ensure that the appropriate MAC address was entered in the NetReg portal correctly and that the device is in fact connected to the network. |
Enable Auto Logon for LibMAX user
While signed into the “libacct“ libacct admin user, open up Registry Editor
This can be done by pressing Windows Key + R, type “regedit” in the dialog box and hit enter.
Navigate the following key:
“HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon”
If not already present, right click on Winlogon > New > String Value and name it DefaultUserName
If not already present, right click on Winlogon > New > String Value and name it DefaultPassword
If not already present, right click on Winlogon > New > String Value and name it AutoAdminLogon
Once these values are present, double click on each one and enter the Value data as instructed below:
DefaultUserName – Enter "LibMAX" here
DefaultPassword – Enter the current password for the LibMAX user.
AutoAdminLogon – Enter 1 to enable Auto Logon and 0 to disable.
Restart Windows and Auto Logon should be working.
...
Join Device to Active Directory
Windows Updates and Settings
Open Windows settings and check for Windows updates and optional updates
Download and install the available updates, restart the device and open Windows settings again
Navigate to Settings > System > Display in Windows settings and change the display scaling to 200%
Navigate to Settings > Time & Language > Date & Time and select the Sync now button found underneath “Synchronize your clock”
Load the MAXHUB Default Theme on to a USB storage drive, insert it into the device and run the MAXHUB Default Theme file
This theme can be downloaded here:View file name MAXHUB Default Theme.themeClose Settings
Right click on the Windows desktop and select Auto arrange icons from the “View” dropdown
Right click on the taskbar and select Show search icon from the “Search” dropdown
Right click on the taskbar and select Turn off from the “News and interest” dropdown
Right click on the taskbar and turn off Show Windows Ink Workspace button
Remove all pinned applications or shortcuts from the taskbar and start menu
Info |
---|
Most of the settings above will need to be applied to each individual user (namely, the LibMAX user) |
Adjust Power Plan in Control Panel
Open Control Panel, navigate to System and Security > Power Options and click Show additional plans
Ensure the “High performance” plan is selected and then click the Change plan settings option found next to that plan
On the drop down next to “Turn off the display:” select the 2 hours option
Close Control Panel
Install Required Applications on LibMAX User
Below is a list of applications that should be installed once user setup is done
Google Chrome
Mozilla Firefox
Zoom Workplace
Microsoft Teams
Note: Once Teams is installed, navigate to Settings > Apps > Startup and set the toggle for Microsoft Teams to off to prevent it from launching on startup
BeyondTrust (Bomgar) Client Client
Create a Batch File to Delete Zoom Account Logins on Startup
Once Zoom has been installed, open a new Notepad window
Insert these two lines into the Notepad document:
Code Block del C:\Users\LibMAX\AppData\Roaming\Zoom\data\zoomus.enc.db del C:\Users\LibMAX\AppData\Roaming\Zoom\data\zoomus.tmp.enc.db
Save the Notepad file once finished, name it “del_zoom_user” and replace the “.txt”file type extension at the end of the file name with “.bat”
Close the Notepad window
To open the Windows startup folder, press the Windows Key + R and type “shell:startup”
Copy the batch file that was just created to the startup folder
When finished, sign into Zoom from the LibMAX user, restart the MAXHUB and confirm that the batch file is in fact clearing out Zoom logins on startup
MAXHUB Device Settings
Set Power Schedule
Select one of the semi-translucent arrows on either side of the display and select the Settings button to access the settings for the MAXHUB
Navigate to Timing Powering and select Add Power On Schedule
Ensure the setting matches the following schedule:
Monday-Friday 7:00AM
Select Confirm
Next, select Add Shutdown Schedule
Ensure the setting matches the following schedule:
Monday-Friday 56:00PM
Select Confirm
...
Set Privacy Cleaning Schedule
While in the MAXHUB device settings, navigate to the Privacy Cleanup section
Set the Clean Before Device Shutdown and Browsing History toggles to on
Next, select Scheduled Cleaning and create a new plan
Ensure the setting matches the following schedule:
Sunday-Saturday 1:00AM
Select Confirm and navigate to the Wireless Hotspot sectionSet the Wireless Hotspot toggle to off File Cleanup section
Ensure all toggles are set to on
Set Password for Wireless Hotspot
While in the MAXHUB device settings, navigate to the Wireless Hotspot section
Create Admin Password for MAXHUB Settings
...