Skip to content

New PC Setup Wiki

Author: RTech
Last Updated: 2025‑09‑19

📅 All dates are kept for reference; the steps below apply to the latest firmware/environments.

1. BIOS Configuration

  • Power on / restart the laptop
  • Enter BIOS – press F2 repeatedly during boot.
  • Overview
  • Note the Service Tag in the device‑name section.
  • Scrolling to the Devices section, note the LOM MAC Address (required for “Network Connection Setup – On Prem”).
  • Boot Configuration – move the UEFI RST BC711 NVMe SK (or the equivalent) to the top of the Boot Sequence.
  • Storage – under SATA/NVMe Operation, switch from RAID to AHCI/NVMe.
  • Power
  • Enable Block Sleep.
  • Turn off Power‑On Lid Open (or disable “Enable Lid Switch”).
  • Passwords – enter the current BIOS password (e.g., B105) under Admin Password, confirm, and click Yes when prompted “Password Valid”.
  • Pre‑boot Behavior – set Fastboot to Thorough.
  • Apply Changes – click Apply Changes, tick “Save as Custom User Settings?”, then click OK.
  • Exit – the laptop will reboot.

2. Windows Installation

Keep the laptop disconnected from the network during the first installation pass to avoid unwanted domain joins or updates.

2.1 Windows 10

1. Insert the clean USB installer (10 GB) with the laptop powered off.  
2. Power on → press **F12**, select the USB under *UEFI Boot:*.  
3. Follow the Windows logo → **Next**.  
4. Click **Install Now**.  
5. Choose **Windows 10 Pro** → **Next**.  
6. Accept license terms → **Next**.  
7. Select **Custom: Install Windows only (advanced)**.  
8. Delete all existing partitions, leaving one free‑space block.  
9. Select the unallocated space → **Next**.  
10. Windows installs; the PC will restart automatically.

Post‑Setup (Windows 10)

  • Click Yes when asked “Let’s start with region. Is this right?” (United States).
  • Click Yes for “Is this the right keyboard layout?” (US).
  • Click Skip on “Want to add a second keyboard layout?”.
  • Click I don’t have internet on “Let’s connect to a network”.
  • Click Continue with limited setup on “There’s more to discover when you connect to the internet”.
  • Type rtech-local for “Who’s going to use this PC?” and click Next.
  • Click Next on “Create a super memorable password” (leave blank).
  • Set all privacy settings to No, then click Accept.
  • Click Not now for the Cortana prompt.
  • The installation finishes and the PC boots into the login screen.

2.2 Windows 11

1. When prompted for network, open **Command Prompt** with Shift+F10 (or Ctrl+Shift+F10).  
2. Run:   oobe\bypassnro  
   - If it fails, cd to C:\Windows\System32\OOBE and run .\bypassnro.cmd.  
3. Continue the OOBE wizard – the steps are identical to Windows 10 (region, keyboard, account, etc.).  
4. All privacy options should still be set to **No**.

If using a newer ISO (post‑May 2024), the bypass script is required to skip mandatory network connectivity.

3. Pre‑Domain‑Join Settings

  • Disable User Account Control
  • Start → UAC → Change User Account Control settings.
  • Slide to Never Notify, press OK.
  • Click Yes when the “Do you want to allow this app to make changes to your device?” dialog appears.
  • Create C:\Support Folder
  • Open File Explorer, go to C:\.
  • Right‑click → New → Folder, name it Support.
  • Right‑click the folder → Properties → Security → Edit.
  • Ensure Administrators has Full Control; click OK.
  • Set Correct Time Zone
  • Right‑click the taskbar → Time → Adjust date/time.
  • Set Time zone to (UTC –5:00) Eastern Time (US & Canada).
  • Click Sync now.
  • Check for Windows Updates – 5‑step loop
  • Start → Windows Update → Check for updates.
  • Let all downloads/installations finish.
  • Click Restart now if prompted (BIOS firmware may also update).
  • Repeat steps 1‑3 until no new updates.
  • If an optional driver update appears, go to Optional updates → Drivers and install.
  • Disable Delivery Optimization:
    • In Update settings → Advanced options → Delivery Optimization → set “Allow downloads from other PCs” to Off.
  • Reboot once more.

4. Post‑Install Clean‑Up

  • Remove Unnecessary Software
  • Start → appwiz.cpl.
  • Find Microsoft OneDrive, click Uninstall, then reboot.
  • Enable .NET 3.5 (Windows 10 only)
  • Start → appwiz.cpl.
  • Click Turn Windows features on or off.
  • Check .NET Framework 3.5 (includes .NET 2.0 and 3.0), then OK.
  • Let Windows download missing files from Windows Update, then click Close.
  • (On Windows 11 this feature is enabled by default.)

5. AppIncinerator – PowerShell Cleanup

Run only once per system.

5.1 Copy the script to the target laptop

  1. On your own laptop
  2. \\RTECH-FileSrv\Imaging\Scripts\AppIncinerator.ps1 → USB drive.
  3. On the target laptop
  4. Plug in the USB.
  5. File Explorer → C:\Support.
  6. Paste AppIncinerator.ps1.

5.2 Execute

# Open PowerShell as Administrator
Set-ExecutionPolicy Bypass      # Confirm with 'A'
cd C:\Support
.\AppIncinerator.ps1
# Press Enter when prompted “Press Enter to continue…”

6. Advanced System Settings

  • Enable Remote Desktop
  • File Explorer → This PC → Properties → About.
  • Click Advanced system settings (right side).
  • Go to the Remote tab.
  • Check Allow remote connections to the computer.
  • Also check Allow connections only from computers running Remote Desktop with Network Level Authentication (recommended).
  • Click Apply → OK.

7. Domain Join & Naming Policy

  • Domain: rtech.org
  • Naming Convention 
- 1‑4: Branch (e.g., PERN for Peru North)  
- 5: Device type (L = Laptop, D = Desktop)  
- 6‑8: OS (W10 = Windows 10, W11 = Windows 11)  
- 9‑10: Position (two digits, desk or cabinet based)  
- 11‑12: Sequential number (incremental per series)

Joining the Domain

  1. Control Panel → System → Computer name → Change….
  2. Enter the new Computer name per the rule above.
  3. Select Domain → type rtech.org.
  4. When prompted, provide domain admin credentials.
  5. Accept the welcome and restart messages; the PC will need to restart to apply changes.

Quick Reference Checklist

  • BIOS set (boot order, AHCI, power options, passwords, fastboot).
  • Windows 10/11 installed offline, local account created.
  • UAC disabled, Support folder created, time zone set.
  • Windows updates applied, Delivery Optimization disabled.
  • OneDrive removed, .NET 3.5 enabled if needed.
  • AppIncinerator ran.
  • Remote Desktop enabled (if required).
  • Domain joined following the naming policy.

Happy configuring! For any hiccups, consult the RTech support team.