Computer names will be upper case. User names will be lower case.

Note that some of the documents use different names (aka).

Name	Serial #	Windows	IP	Ch	Comments
KTR (aka CH17)					Partly set up
KBO (aka CH18)				15?	Partly set up
KPS (aka APS)				17	- Set up the "Old Way"

Register the system under a LOCAL account - NOT a Windows account.

To allow network file sharing, all users must use MS accounts.

kad (local) admin
kmt (local) admin (maintenance .. reset password after use)

Local User ID : kad
Set locale etc.
Check system time

Workgroup: KPFZ

Turn Network Discovery Private (ON)

Currently auto-assigned, should be fixed.

Fixed IP address eg 192.168.1.110 KPS (eg)
Fixed IP address eg 192.168.1.111 KTR
Fixed IP address eg 192.168.1.112 KBO

At present we are NOT partitioning the main (C:) drive.

All file access is controlled by folder.

Each system will be set up with a local administrator account, 'kad'

But to enable file-sharing across the network, all other accounts have to be microsoft accounts.

Microsoft accounts. (MS)

A microsoft account needs an email. We will be using k**@kpfz.org accounts.

The first time you create a new login, and select MS it will create a new MS account for you.
It will send a confirmation code to your email address.
In the process you set a password.

When you log in to the new account you give the password.
Then you can set a PIN, which will be the "local" password on THAT computer.

We have the new supa-sektrit external gmail.
A01 Get a password account under that email, which will hold all the master passwords ON HOLD

KSC Master Account ksc@kpfz.org - DONE
KSC Bitwarden Account - 2 users ksc@kpfz.org and john.saare@gmail.com DONE

Then for the systems  (each will have ALL the id's to allow switching)
kad   (local,admin)
kmt (local,admin) .. we can give this password to a support person, and then change it when done

ktr@kpfz.org  (admin) -- Note : KTR must power-up to this account MS DONE
kbo@kpfz.org   (user) -- Note: KBO must power-up to this account MS Done
kps@kpfz.org        (user) --other people using the APS computer MS Done
ksm@kpfz.org (admin)-- for Andy .. station manager  MS Done
Need to check if Andy wants this computer to auto-login. Probably not.
MS User1, User2 ..  if needed.   (user)

Authorize "admin" users for Remote Desktop (Used as a backup for RemotePC)

The kad admin should create an account and then log into it to set it up.

Log in with the MS account name and password.
Specify "Local Files Only" .. do NOT select "One Drive"
Create a PIN for the account : ...

The desktop will be preloaded with various apps.
DELETE those which the user is not authorized for (TBD)
ADD required shortcuts.

NOTE: each account on each computer will have a unique "wallpaper" .. so you can see which computer you are logged onto, and which account.

Reboot and hold F1. Set Boot on Power-up to ON.

Download (if needed) and run SysInternals AutoLogin.exe
Specify the user-name and password depending-on the machine.
eg KTR : set user to ktr@kpfz.org

WARNING: this has to be repeated if the login user or password is changed.

Turn off "sleep" functions.

In my experience a Windows update occasionally fails to restart properly.

Unfortunately Windows 10 no longer lets you select "Instal Manually".

It allows you to "snooze" an update for up to 30 days. Select this option, and then do the update at a pre-selected time.

I'm still figuring out work-arounds. Maybe have the KBO computer do a one-hour replay, and update the KTR computer in this slot.

For KTR/CH17 turn all sounds OFF except as needed for Total Recorder play / recording.

For KBO/CH18 set sounds according to operating mode -- Part of "Normalize" before and after.

System Sounds must (almost) always be OFF. Use the Volume Mixer.

WARNING: this must all be done under the "admin" account "kad"

A "master" folder will be set up for each category. There will be "mirrors" on the other devices.

The name will be different for each device), in the form DEVICE_category (user name)

KTR_ktr
KTR_kbo
KTR_kps
KTR_ksm

KBO_ktr
KBO_kbo
KTR_kps
KTR_ksm

etc

A permanent "fixed" USB device must be formatted to NTFS, and given a unique name eg KAR1

This will have master folders like

KAR1_ktr
KAR1_kbo
....

This must be done under the admin account kad

Right click on the folder > Give Access To ... > Specific People

Select from the drop-down list and Click ADD
The name whould now appear in the list - with Read access
Right-click on "Read" .. and change it to "Read/Write"

If not already done, click Share (which will give network access).

Add other people, then click Done.

Note: the OWNER can query who has access to a folder with the icacls command.

eg (from the command shell)

> icacls KTR-*

will show the access list for all the KTR folders.