1. When starting the PC, do not connect to internet (WiFi or cable) until you reach the desktop. (AKA Don't log into Microsoft)

  2. Don't use a password for initial generic username and don't use the same login name as the user will ultimately use.

  3. Uncheck Inking & typing, Tailored experiences and Advertising ID in Privacy Settings

  4. Not Now for Cortana

  5. As soon as you reach the desktop, connect to internet

  6. Set time zone to Central Time

  7. Disable hibernation unless user explicitly needs it ( powercfg /h off at elevated command prompt)

  8. Disable Write debugging information under Advanced System Settings -> Startup and Recovery

  9. Rename the PC to something descriptive and reboot

  10. Check for updates in Windows Updates

  11. Check windows activation

  12. Run intel driver update (Declining Intel Computing Improvement Program)

  13. Update BIOS if possible

  14. If joining domain: Join PC to domain remembering to add Domain Users to Administrators BEFORE reboot.

  15. If setting up GCPW remember to add Everyone to Administrators (In Windows Home, use lusrmgr.exe) BEFORE reboot and install regkey.

  16. Add Computer, User's Files, Network and Control Panel icons to user desktop.

  17. Set desktop icons to auto arrange

  18. Hide Cortana Button, Task View Button and Meet in tooltray

  19. For Slower PCs / PCs used mostly for RDP, uncheck 3 x Animate and 3 x Fade options in Performance Options->Visual Effects

  20. Enable remote desktop (if needed), add user to users allowed to log in remotely list and check windows firewall has RDP allowed.

  21. Install Google Chrome, pin it to tooltray. Set Chrome as default browser and login to google identity.

  22. Unpin Edge, Store and Mail Icons from ToolTray and delete Edge Desktop Icon.

  23. Unhide tooltray icons on higher resolution displays

  24. Turn off News and Interests

  25. Dismiss security warnings requiring sign in.

  26. Set power button to function to power down PC

  27. Install Google Drive for Windows if needed.

  28. Install Cisco Duo (duo.shadowtechs.com)

  29. Set wallpaper

  30. Install Microsoft Office if applicable via incognito window, recording keys in info sheet if applicable.

  31. Install Acrobat Reader/Acrobat or Bluebeam as needed, recording keys in info sheet if applicable.

  32. Run Windows Debloat Script (REMOVE ALL BLOATWARE, DISABLE CORTANA, DISABLE EDGE PDF, UNINSTALL ONEDRIVE, REMOVE BLOATWARE REGKEYS)

  33. Delete initial setup user if possible.

  34. Empty Recycling bin