Setting Up a New PC

Follow these steps in order.

1. Install the operating system. See Operating System for which one to choose.

2. Create two accounts:

   • A local administrator account, used only for installing software and changing settings.
   • A separate standard account (no administrator access) with a different password, for the person who will use the computer every day.

   On Windows 11, this is under Settings → Accounts → Other users. See Privilege Escalation for why.

3. Apply security hardening. On Windows, use HotCakeX’s Harden System Security. This also makes updates install automatically (see Software Updates).

4. Install the standard software with winget:

   • Winget-AutoUpdate, which keeps everything else updated: winget install -e --id Romanitho.Winget-AutoUpdate
   • A web browser (Google Chrome)
   • A word processor
   • The Bitwarden browser extension

5. Name the computer ws followed by its location in the office, for example wsnorth (see wsnorth, wseast, wswest, wscentral). On Windows 11: Settings → System → About → Rename this PC.

6. Record it in Bitwarden. Save the computer’s name and its administrator password in the shared vault.

7. Update the workstation list on this site with the new computer and who uses it.

Remember to follow the recommendations in Recommended Software and Security.