Police Laptop Setup

Description

This article documents the steps taken to set up a mobile laptop for the university police department. These laptops are used in patrol cars by officers.

As of December 2023, the laptops were Panasonic Toughbook CF-33-2 model tablet/laptop combos, with Verizon Wireless SIM cards for cellular data.

These instructions assume setting up a laptop from its new, in-box state, as well as familiarity with the basic deployment of Windows devices at WSU.

Procedure

  1. Unpack and physically set up laptop with power supply.
  2. Remove back cover and one battery to access SIM slot.
  3. Install SIM card.
  4. Replace battery and back cover.
  5. Remove stylus from tablet side, and attach retaining cord to stylus and tablet.
  6. Label device according to naming convention.
  7. Connect to Ethernet at a network jack with connectivity to the UPD domain, SHERLOCK.
  8. Insert Configuration Manager boot media and boot laptop.
  9. Press DEL or F2 to get to BIOS.
  10. Set supervisor/admin password to protect BIOS. Ensure that only the BIOS requires a password, not booting the device.
  11. Confirm TPM is activated.
  12. Go to EXIT tab, and select to boot to the flash drive.
  13. Once in the ConfigMgr boot media, select and start the POLICE – Standard Win11 task sequence.
  14. Name device according to requested naming convention. Use SHERLOCK domain credentials to join device to domain.
    NOTE: STEPS 14 through 27 are handled by the Configuration Manager task sequence, and are presented here for reference only, or for fully-manual setups.
  15. Partition and format disk.
  16. Install Windows 11 Enterprise. Use a LOCAL/DOMAIN account; do not use a Microsoft account.
  17. Join computer to SHERLOCK domain.
  18. Install device drivers.
    • Panasonic Toughbook CF-33 models have complete driver packs available for download from Panasonic.
  19. Enable BitLocker drive encryption.
  20. Install Google Chrome.
  21. Install Microsoft LAPS.
  22. Install Microsoft 365 Apps for Enterprise (Office) with appropriate licensing.
  23. Install Palo Alto Global Protect VPN client.
  24. Configure VPN client registry settings to set default VPN portal to vpn-patrol.wichita.edu.
  25. Install Adobe Acrobat Reader.
  26. Install Milestone XProtect (security camera monitor.)
  27. Confirm that Powershell execution policy is set to restricted.
  28. THE FOLLOWING STEPS are done manually by technicians.
  29. Confirm that the cellular data plan is active and the laptop can access the Internet via cellular data. If necessary, add or change the active APN to vzwinternet instead of vzwadmin.
  30. Check and install latest Windows updates from Microsoft.
Was this helpful?
0 reviews
Print Article