Download view-winxp-optimizations

Survey
yes no Was this document useful for you?
   Thank you for your participation!

* Your assessment is very important for improving the workof artificial intelligence, which forms the content of this project

Document related concepts

Cracking of wireless networks wikipedia , lookup

Zero-configuration networking wikipedia , lookup

Microsoft Security Essentials wikipedia , lookup

Remote Desktop Services wikipedia , lookup

Transcript
Windows XP standard installation
procedure
Version 1.0.4
1. Windows XP standard installation procedure
For Windows XP, according to a Standard Installation Procedure (SIP) to set up, we shall
proceed in the following order:
1.1. Windows XP initialization:
Install Windows XP SP3 UK versie
-
Memory 256 MB
1x vCPU’s
CD/DVD Drive Drive letter Q
Hard Disk 10 Gb Drive letter C
Network adapter
1.1.1. Windows XP installation adjust during and after initialization:
connect the Windows XP CD / ISO to the ESX server and install Windows XP in the following
way:
- Set the VM to install Windows XP to start up.
- Immediately press F6 to install additional drivers (bus logic)
- Press F8 to accept license agreement
- Create a partition of 10 Gb large. Format this partition using NTFS, Quick (Format).
- Select the partition for Windows XP to install.
- Regional Settings:
Leave default and click Next. The default are:
* System or User Locale settings: English (United States).
* Keyboard layout:
 Input Language: English (United States)
 Keyboard layout/IME: US.
- Complete the following “Personalize your software”:
* Name: Organization
* Organisation: Organization Section
- Enter the correct Product Key (if required).
- Enter the computer name and password for the local administrator account.
- Enter the proper date and time zone. Leave the option “Automatically adjust clock for
daylight saving changes” ON.
- Networking Settings: Choose “Typical settings”, The network Card(s) will be configured
after installation.
- Make the desktop Not yet member of the domain, will be configured after installation.
1.2. Vmware settings for performance
Let’s go through creating a VM for VDI use. Remember this VM will be used over and over
again. It is important to get the image small and optimized. Don’t try to rush this process.
There are many, many things you can do to customize the desktop for your environment.
This is just a sampling to get you started.
1.2.1. Virtual Machine Systems changes:


Ensure that floppy drive (if present) is not connected at startup
Ensure that cd-rom drive (if present) is not connected at startup
Page 2 of 12
1.2.2. Windows XP Changes:










Ensure SP2 + applicable updates are applied
Install VM Tools
o Sync time from host
o Disable Windows time update
By default Windows XP sends 16 bit color over Terminal Services. If you want to
enable 24 bit color you need to modify a local machine policy.
o local computer policy editor, go to Local Computer Policy
 Computer Configuration
 Administrative Templates
 Windows Components
 Terminal Services
1. Then click on the “Limit maximum color depth” policy. Enable,
set to 24 bit, and click on OK.
2. Restart your RDP session and you will be able to use 24 bit
color
It’s still not as nice as RGS, but at least the colors will be smoother. J
Disable COM1 & COM2
o Right-click “My Computer” -> Select “Manage”
 Device Manager
Turn off all theme enhancements
o Right-click “My Computer” -> Select “Properties”
o Choose the “Advanced Tab”
o Under Performance Section Choose “Settings”
o Choose “Adjust for Best Performance”
o Optionally choose settings like font smoothing if desired
Disable all screensavers except Blank password protected
o Copy the scrnsvr.scr over the top of all the others (because windows has a
habit of bringing them back if you delete them). Once you do this, you
should enable the only screensaver that will show up which is the
Blank/Password Protected.
Delete all background wallpapers
o
Why waste RAM or disk space on wallpapers that will be covered by an
application anyway
Ensure full hardware acceleration
o Control Panel -> Display -> Settings Tab -> Advanced Button
Troubleshooting Tab -> Set acceleration to full (that way by default, but
check to make sure it hasn’t changed in some latest Microsoft Update)
Delete all the hidden update folders (this uses a lot of space and no one is going to
uninstall any of those updates). Leave the one that looks like $hf_mig$.
Page 3 of 12



Disable Indexing Services
o Indexing Services uses large amounts of RAM. It enables faster searches by
scanning the indexed lists. However, indexing typically uses lots of CPU time and
if the user doesn't search their computer often, indexing won't help them at all.
If they do search frequently, indexing may not make the searches faster.
 Go to Start/Control Panel/Add Remove Windows Components
 Uncheck the Indexing services
o Disable it on the C: drive also
o
Disable Paging of the executive
o HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
“DisablePagingExecutive”=dword:00000001
Create and publish a GPO for folder redirection to the users’ storage space on the SAN
for the following:
Page 4 of 12










o Application Data
o My Documents (and all sub-class special folders)
o My Desktop
o http://support.microsoft.com/default.aspx?scid=kb;EN-US;232692
Optimize the Paging File
o Right-click “My Computer” -> Select “Properties
o Choose the “Advanced Tab”
o Under Performance Section Choose “Settings”
o Click Change. Select the Custom Size option and set the Initial Size and
Maximum Size to 512 MB or the exact size of the configured RAM (whichever is
greater).
Turn off unnecessary sounds (ie Startup and Shutdown wav’s)
o Control Panel, double-click Sounds and Audio Devices and move to the sounds
tab
o Disable unnecessary sounds (mail notification and warnings are probably the only
ones you need)
Defragment Prefetch (faster booting)
o From DOS Prompt type “defrag c: -b”
o Do NOT clean out the Prefetch directory however
 “It is a bad idea to periodically clean out that folder as some tech sites
suggest. For one thing, XP will just re-create that data anyways; secondly,
it trims the files anyways if there’s ever more than 128 of them so that it
doesn’t needlessly consume space. So not only is deleting the directory
totally unnecessary, but you’re also putting a temporary dent in your PC’s
performance.”
Remove or minimize System restore points
o Right-click My Computer, select Properties and go to the System Restore tab.
Remove blinking ICONS from the systrey
 Remove the display of icons like the NIC that blink
 Alternatively you can hide all ICONS by
 Modifying
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Polici
es\Explorer. In the right-hand pane create a new DWORD value called
NoTrayItemsDisplay and set its value to 1.
Get Rid of Microsoft Messenger
o Edit C:\WINDOWS\INF\SYSOC.INF file
o Under the [Components] heading, you'll see a whole bunch of parameters for
various Windows applets. Some of them contain the word "hide." Those particular
programs, which include Windows Messenger (msmsgs), Terminal Server, Pinball,
and others, are installed on your XP system, but their entries are hidden from
and Add/Remove dialog
o Remove the hide from the lines of the programs you wish to remove
o Msmsgs=msgrocm.dll,OcEntry,msmgs.inf,hide,7
o Save the file
o Go to Control Panel Add/Remove Programs
o Click on Windows Components button and you'll see Windows Messenger listed.
Uncheck it and click Next
Turn off Disk Performance Counters
o In Windows XP Performance Monitor disk counters for physical disks are turned
on by default
o Stop it by running: DISKPERF –N
Disable any unwanted services
o Autoruns from www.sysinternals.com is good for this
Run Disk Cleanup
o Double Click My Computer
o Right Click C:, properties
Run Disk Defrag
o Double Click My Computer
Page 5 of 12




o Right Click C:, properties
Run PageDefrag from sysinternals
o One of the limitations of the Windows NT/2000 defragmentation interface is that
it is not possible to defragment files that are open for exclusive access. Thus,
standard defragmentation programs can neither show you how fragmented your
paging files or Registry hives are, nor defragment them. Paging and Registry file
fragmentation can be one of the leading causes of performance degradation
related to file fragmentation in a system.
o PageDefrag uses advanced techniques to provide you what commercial
defragmenters cannot: the ability for you to see how fragmented your paging
files and Registry hives are, and to defragment them. In addition, it defragments
event log files and Windows 2000/XP hibernation files (where system memory is
saved when you hibernate a laptop).
o PageDefrag works on Windows NT 4.0, Windows 2000, Windows XP, and Server
2003.
o Download from
www.microsoft.com/technet/sysinternals/FileAndDisk/PageDefrag.mspx
Save your work to this point as a new template
Install Necessary Software
Repeat the above 5 steps
Page 6 of 12
1.3. Appendix A: Miscellaneous Information
1.3.1. Large Monitor Support:
You can use an RDP6 client with the /span command line option to enable large display size
and use SplitView software to get a multi monitor feel.
1.3.2. Logon problems
For a user to log on to a Terminal Server, the following permissions and rights must be
granted:
o
o
o
o
2003 and Windows XP only: Allow log on through Terminal Services
This right is by default granted to Administrators and members of the local Remote
Desktop Users group on the server.
W2K only: Log On Locally
This right can be granted in the security policy for the server, in Security
Settings\Local Policies\User Rights Assignment\Log On Locally.
Permission to use the rdp-tcp connection
2003: The local Remote Desktop Users group has by default "User access"
permission on the rdp-tcp connection.
W2K: The local Users group has by default "User access" permission on the rdp-tcp
connection.
Allow logon to Terminal Server checkbox, in the properties of the user account in
AD.
By default, this checkbox is checked for all users.
So on standard installations of a 2003 or Windows XP Virtual Desktop, you only have to add
your users or user groups to the local Remote Desktop Users group on the local machine.
1.3.3. Error messages - permission problems
Here are some common error messages which users get when they haven't been granted
the correct permissions and user rights:
o
o
The local policy of this system does not permit you to logon interactively
2003 and Windows XP: The user account is not a member of the local Remote
Desktop Users group. See 289289
W2K: The user does not have the "Log On Locally" right in the servers security
policy.
You do not have access to logon to this session
2003 and Windows XP: The user account is not a member of the local Remote
Desktop Users group.
W2K: The user doesn't have the necessary permissions on the rdp-tcp connection.
This happens when you remove the User group from the properties of RDP-tcp
Your interactive logon privilege has been disabled
The user does not have the "Allow Logon to terminal server" check box selected on the
Terminal Services Profile tab of their account.
Page 7 of 12
2. Disable services
Disable de following services:
Alerter: Intended for transmitting signals to a network administrator. These
function is usually not used.
Computer Browser: (depending on Server and Workstation): This service keeps track of
which computers and files on the network are present. After disabling
the service is still possible to browse the network. This service is not
necessary,
COM-service voor IMAPI CD-branders: This function is used to burn
CDs from Windows Explorer. This service is by default ‘automatically’. Does the PC have no
CD-burner this service is not necessary. Do you use any other burning software, try this
service to run manual on your system. In most cases, the service is automatically switched
off when starting the external burning software.
Indexing-service: Indexes of files on the hard disk makes searchs for a file faster. This
service provides regular misery, especially in the moments that the CPU can be used for
important things. Even without indexation operates the PC fine, gain speed to turn this
service therefore.
Messenger: This service is used for sending small messages over the network (in this case
is not referred to the Live Messenger).Typ the command NET SEND 127.0.0.1 Welcome
in a command window or in the Run window. After entering this command is a message
sent to another computer on the network. For safety it is better to disable this service so
that programs not abuse them.
QoS RSVP: QoS is used to prioritize certain network traffic, like VoIP. Is there no use for it,
You can disable this service.
Routing and Remote Access: Is it not the intention that remote users wil log, this service
makes no sense: so off.
Thema's: Do you have no needs for special effects? Then you can also disable this service.
Disabling this service is only recommended when the PC is really slow, because it is
ultimately for the ultimate user experience from XP. The visual effects may also be adjusted
via the control panel, System, Advanced tab, Settings button (for Performance), Best
Performance.
Smart Card: Only needed if you actually have a smart card.
WMI-prestatieadapter: Information on performance we do not have? The performances
alone are more than adequate. This service can possibly be eliminated.
Page 8 of 12
3. Not reacting quickly closing applications
If for whatever reason an application is hanging and total not responds, it may still take
some time before the application can shut down completely. This process can be accelerated
by a change in the Windows Registry.
Choose Start, then Run
Typ regedit and click [OK].
In Registry Editor choose HKEY_CURRENT_USER >> Control Panel >> Desktop.
Rightclick in the right half of the screen by WaitToKillAppTimeout and choose from the displayed
context menu Change.
Here you see the Edit String dialog box, under Value data, default is 2000.
Change this in a lower number, eg 500 and click [OK].
Close the Registry-editor
You now have the time it takes for a more responsive application ends to 15 minutes
4. Optimize Broadband
You can optimize XP-professional for a fast internet connection
Click Start followed with Run. Type gpedit.msc and click [OK].
Click now on the screen that appears in the left pane to Local Computer Policy,
Administrative Templates, Network. Then click on QoS Packet Scheduler.
In the right screen a number of options appears including the book available bandwidth
limit. Double-click this option and put a bullet in Enabled. Then fill in Bandwidth Limit the
value 0. The zero in this case means unlimited. Now choose Apply.
Go through the panel to the network. Click the right mouse button on the network which is
built into your broadband connection (typically LAN) and choose Properties. Make sure there
is a checkmark in QoS Packet Scheduler and then start the PC again.
5. Network setup
Go Start, Settings, Network and Dial-up Connections. Rename the ACTIVE “Local Area
Connection” to “Production”:
The network card for the internal network must be configured as follows:
IP adres:
Subnet masker:
Default gateway:
DNS servers:
DNS suffix:
<follow IP plan>
< follow IP plan>
< follow IP plan>
< follow IP plan>
< follow IP plan>
Page 9 of 12
6. Install Windows XP (security) updates
6.1. Open Internet Explorer and install all updates
6.2. Other settings
 Select the tab “Advanced” button “Settings” in the section “Startup and Recovery”:
Page 10 of 12
 Set the options as following:
Click OK, you come back to the tab “Advanced”.

Select the tab “Advanced” button “Error Reporting”:
Page 11 of 12
Set the options as following:
Now you are ready to convert your machine to a Template
Now that you have a good template, create clones to work from.
Enjoy!!!
Page 12 of 12