Skip to content

New Computer Setup

Source: _imported/New Computer Setup Updated 2024.txt · Applies to: all club workstations · Last reviewed: 2026-07

Purpose

Full SOP for deploying a new workstation at a client site — from initial OOBE through domain join, Jonas/JAM, security agents, applications, user-profile setup, Windows hardening, and folder ACLs.

Prerequisites

  • Windows 10 Pro (required for domain join)
  • Domain CSupport account credentials
  • Physical or network access to the club's server (PDC)
  • Access to the club's Jonas drive (J:)

Pre-checks (for rebuild/replacement)

Always check the client's folder first in case there are any differences or specifics not covered by this guide.

  • [ ] Confirm network drives currently mapped
  • [ ] Document programs in use (e.g., Creative Cloud, Zoom, Zac)
  • [ ] Check root of C:\ for saved documents
  • [ ] Record Jonas terminal ID
  • [ ] Confirm VPN configuration
  • [ ] Check for local .pst archive files (archived emails/mailboxes)
  • [ ] Verify Chrome account exists for bookmark and password sync; if none, request user create one
  • [ ] Note installed printers

Computer naming convention

Purchased by Format Example
Club First initial + last name + Windows version JDoe10P (John Doe, Windows 10 Pro)
Club Support <CLUB>-<FirstInitial><3LastNameLetters>-<MMYY> <CLUB>-GZen-0721
POS <CLUB>-POS<JonasID>-<MMYY> <CLUB>-POSG1-0721

Rule: Use the same naming scheme as before. The old computer object must be deleted from AD before joining a replacement with the same name.

Domain depends on club/location.

Steps

Initial Setup

  1. Boot to OOBE; set Region & Keyboard to US.
  2. Create local CSupport account.
  3. Decline all trackers and optional features (e.g., Cortana).
  4. Set UAC to Never notify.
  5. Uninstall all bloatware (e.g., trial AV, pre-installed Office).

Domain Join

  1. Go to System → Rename this PC (advanced).
  2. On the Computer Name tab, select Change…
  3. Enter the computer name per the naming convention above.
  4. Set the domain to the club's domain.
  5. Restart the computer.
  6. Log in as domain CSupport.
  7. Verify the Jonas drive is present and accessible (confirms successful domain join).

Installing Jonas

  1. Log into the PC as domain CSupport.
  2. Run Jonas (J:)\GJCwin\tools\setup.exe.
  3. If an error occurs, exit and run Jonas (J:)\GJCwin\tools\Jonas Mapped Drive Connector.exe first, then retry.
  4. If the system asks for Admin permissions even though logged in as domain CSupport:
    1. Copy the installer to the desktop, then to the C: drive.
    2. Log in as local CSupport and run it from there.
  5. When prompted for a terminal ID, enter TX if the real ID is not yet known.
  6. After installation finishes, a window will pop up with a Jonas icon.
  7. Copy the shortcut to the C: drive.
  8. Shortcut location: C:\Users\<username>\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jonas Business Systems
  9. Restart the computer.
  10. Log back in as CSupport.
  11. Run Jonas as Administrator the first time.
  12. Open properties of C:\GJCWIN → Security tab → Edit → Add Everyone → grant Full control.

Changing the Jonas terminal ID (if set to "TX" above)

  1. Log into Jonas as CSupport.
  2. Navigate to Workstation Setup.
  3. Click the magnifying glass beside Terminal ID and find the correct ID for the station.
  4. Open C:\GJCWIN\DATA and open the JONAS file with Notepad.
  5. Change Fid0: to the desired terminal ID.

Disabling NIC offload properties

  1. Open Network and Sharing Center.
  2. Go to the network adapter properties → Advanced tab.

  3. Disable the following:

  4. [ ] Flow Control

  5. [ ] Interrupt Moderation
  6. [ ] IPv4 Checksum Offload
  7. [ ] Large Send Offload V2 (IPv4)
  8. [ ] Large Send Offload V2 (IPv6)
  9. [ ] TCP Checksum Offload (IPv4)
  10. [ ] TCP Checksum Offload (IPv6)
  11. [ ] UDP Checksum Offload (IPv4)
  12. [ ] UDP Checksum Offload (IPv6)

Installing JAM

  1. Log into the server as CSupport.
  2. Run Jonas (J:)\GJCwin\tools\Jonas.NET\INSTALL\setup.exe.
  3. Run the JAM shortcut on the desktop as Administrator for the initial setup.
  4. Windows will pop up to fix the connection — select Direct Connection.
  5. Fill in the direct-connection template:
Field Value
SQL Server <server-name>\SQLexpress
Database Name JonasNET
SQL User Jonas01
SQL Password Jonas01

Note: The SQL Server name can differ depending on how the club had it set up previously. Check any computer that already has JAM or PDC installed, or consult the client's folder in "BC Clients."

  1. Log into CSupport locally.
  2. Open REGEDIT.
  3. Navigate to HKLM\SOFTWARE\WOW6432Node\JonasNET.
  4. Right-click JonasNET → Permissions → grant Everyone Full control.

Antivirus

Sentinel One is the current AV/EDR standard (Trend Micro is retired). The S1 agent is deployed from the SentinelOne Management Console (installer + site token) via the club's standard push method (GPO/Atera/Intune). Confirm the console URL and token with your supervisor. Every client must have the S1 agent.

Installing Atera

  1. Log into the server as CSupport.
  2. Check the server for the Atera install package.
  3. If not present, log into Atera in a browser and download Install agent.
  4. Install Atera.
  5. Open services.msc — confirm AteraAgent is running.
  6. Check the Atera console to confirm the system appears.

Misc Applications

  1. Remove OEM pre-installed Microsoft 365. Sign into the user's account and download the installer from the portal instead.
  2. Install Adobe Acrobat Reader.
  3. Install Google Chrome.
  4. Install TeamViewer Host:
  5. Go to clubsupport.ca → Support → download TeamViewer Host.
  6. Do not create a TeamViewer account.
  7. Check with the user to see if any other applications are needed.

Setting Up New User Profile

  1. Log into the user's account.
  2. In File Explorer, access the server via domain (e.g., \\<PDC-name>) or DNS IP (e.g., \\<server-IP>).
  3. If replacing an old PC — ensure the user has access to the same network drives, printers, and files as on the old PC.
  4. Check for any documents / PDFs / spreadsheets on the C: drive — if found, copy them to the user's My Documents.
  5. Install any required printer(s) by browsing to \\<PDC-name> from File Explorer.
  6. Add Computer and User's Files icons to the desktop:
  7. Right-click desktop → Personalize → Themes → Desktop icon settings.
  8. Check Computer and User's Files → OK.

Windows Hardening

Notifications

  1. Settings → System → Notifications & actions — turn off and uncheck all boxes.

Privacy

  1. Settings → Privacy:
  2. General — turn off all options
  3. Inking & typing personalization — turn off all options
  4. Diagnostics & feedback — turn off all options
  5. General — turn off all options
  6. Activity history — turn off all options

Gaming

  1. Settings → Gaming:
  2. Xbox Game Bar — turn off all options
  3. Captures — turn off all options
  4. Game Mode — turn off all options

Power Settings

  1. Press Win + R → run powercfg.cpl.
  2. Select Change plan settings.
  3. Desktops: change all options to Never.
  4. Laptops: change Plugged in options to Never.

Windows Updates

  • [ ] Run and install all mandatory Windows Updates.

Redirected Folder ACLs

On the server, verify permissions on the user's redirected folders:

  1. By default, Users and Administrators have Full control — this is incorrect.
  2. Disable inheritance and set permissions explicitly:
Account Permission
Administrator Full Control
SYSTEM Full Control
CSupport Full Control
<new-user> Full Control

All other groups/accounts should be removed.

VPN & RDP

See the VPN and RDP document for the applicable procedure.

Notes / Gotchas

  • Always check the client's folder first before following this guide — every club may have differences or specifics not captured here.
  • AV/EDR: Sentinel One is the current standard (Trend Micro retired) — install the S1 agent from the SentinelOne console.
  • The JAM SQL Server name varies by club. If <server-name>\SQLexpress does not work, check an existing JAM/PDC machine or the client's folder in "BC Clients."
  • When Jonas setup.exe prompts for Admin credentials while logged in as domain CSupport, copy the installer to C: and run it as local CSupport.
  • For replacements, the old computer object must be deleted from AD before reusing the name.
  • Default SQL credentials for JAM direct connection: user Jonas01, password Jonas01.