install windows (install pc)

Install Windows

• bios : boot dvd first and  begin install , 
• partion c for system, d for data and backup driver, or e for data backup.
• prepare the driver 
• plug off the lan cable
• copy all driver , and installer to d: (for easy reinstall)
• when install the computer the name should : installer_ComputerName don't match domain controller administrator name and another station administrator name.
• after install xp plug back the lan cable update the latest windows service pack
• delete icon : %AllUsersProfile%Desktop , %AllusersProfile%Start Menu. Notes : Administrator use command to control the PC.
• install the anti virus, and set the scan schedule rename cmd.exe , command.exe compmgmt.msc : set current user should not have admin right make a directory name autorun.inf in the root directory, and make it readonly and hidden, by right click, property.
• mark down it's lan card number (mac), and install it's on the router statis for control purpose.
• make a new record card, just as 醫生咭 for this computer. to record this log. location, hardware software.
• disable the usb HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsbStor.start=4  && 4 for stop , 3 for start
• disable run usb software begin > run >secpol > software control policy  step 
  1.  強制 .內容 (Set all user exclude administrator) , all software exclude dll
  2  other policy : add c:\>
  3 safe level > not allow > default (click it)
• write down the MAC for Setting in DHCP.
• install email account install open office
• install odbc install application (company system) 
• install application (company system)
• make a xxx.bat and put it in the start folder. the following is the xxx.bat content :
  @echo off 
  net share c$ /d
  net share winnt$ /d
  net share admin$ /d 
• stop service
  blue tooth,
  windows fax
  remote registry
  bitlocker drive encryption service
  Family safety (Parental controls)
• install the avg, and set the scan schedule
• map the driver