Global IT

Support Documents | India

Setting up your new Laptop (New Employees) | Windows & Mac

Ver 1.0
 2

Table of Contents
1.0 Purpose of the Document:.............................................................................................................................4
2.0 Pre-Requisites:.................................................................................................................................................4
3.0 Unboxing:.........................................................................................................................................................4
4.0 Setting up your Laptop:..................................................................................................................................5
5.0 Connect to Internet.......................................................................................................................................11
6.0 Change Password and Register for Phone Authentication.....................................................................15
7.0 Join your laptop to Azure Active Directory (AAD)....................................................................................16
8.0 Log in with Microsoft Login ID and Password:..........................................................................................24
9.0 Sign-in to Applications:................................................................................................................................28
10.0 Install Windows updates:.............................................................................................................................30
11.0 Install MSFTVPN:............................................................................................................................................32
12.0 Setup your MAC device................................................................................................................................38
13.0 Seek IT Support...........................................................................................................................................39

Microsoft Confidential | Do not Share

 3

Document Revision:

Version Description of Change Author Date

1.0 New document TechLink 03/19/2020

Document Information:

Version Created by Reviewed by Approved by Dated

1.0 TechLink

Microsoft Confidential | Do not Share

 4

1.0 Purpose of the Document:

The purpose of this document is to provide guidelines for new Employees to setup their brand-
new Laptop for their Work. This document provides instructions pertaining to the Laptop that
comes with a Client Standard Windows 10 Image on their device. It provides all the pre-
requisites and instructions for adding their Laptop to their Work Domain, Phone Registration
and running the necessary updates and setting it to work with the Microsoft VPN.

The objective is to enable an Employee to be able to setup their Work Laptop by themselves
without the need to reach out to TechLink in situations where they are unable to do so.

2.0 Pre-Requisites:

It is assumed that the Employee is comfortable with working on a Windows Operating System
and meets the below necessary pre-requisites:

1. Has a new Laptop issued that needs to be setup for Work.

2. Has been provided with a valid Microsoft Login ID (alias).
3. Has been issued the temporary Password for his alias. Employee’ Manager will receive
this.

3.0 Unboxing:

 Unbox your new Laptop

 Note down the Serial number for your laptop
 Ensure that all required Accessories and Cables are included in the box.
 Connect your Power Adapter and check that your new Laptop is turning on and getting
charged.

In case of any issues with your new Laptop, reach out to your local GHD at 0006000016018

Microsoft Confidential | Do not Share

 5

4.0 Setting up your Laptop:

If you are a Mac device user, first change your password and register for Phone
authentication by following the instruction detailed in Section 6.0 and then follow the
instructions in Section 12.0 to setup your Mac device

Windows users please follow the instruction detailed below

1. Plug your Laptop’s Power Adaptor into your device and plug it into an electrical socket.
2. Turn your Laptop On using your Laptop’s Power button.

Note: In case, your Laptop’s Power button does not match the above image, refer your
Laptop’s User Manual for the information.
3. Your Laptop should turn on and the Setup Program will display a Progress indicator as it
gathers the initial information about your Computer.
4. The Setup Program will display the ‘Let’s get started’ page as shown below:

Microsoft Confidential | Do not Share

 6

5. The ‘Let’s get started’ page shows an option to select a desired Keyboard Layout or you
can continue with the default “English (United States)” Keyboard layout.
6. Once you have selected the Keyboard layout (or decided to continue with the default
keyboard), click on the arrow icon beside ‘Let’s get started’.
7. The Setup Program will automatically run through a series of Deployment Readiness
tests and will display the results on the Deployment Readiness page. Review the results
and select ‘Next’ if there are no errors. Note: You can choose the ‘Validate again’ button
at the top in case you want the system to be validated again.

8. As a Wired Corporate Network is not available, select the ‘Work’ option under
Workgroup in the ‘Computer Details’ page. Choose the below information for the fields:
a. Computer Name : You can leave the auto-filled name
b. Join a Domain : Select ‘No’

Microsoft Confidential | Do not Share

 7

c. Workgroup : Work

9. Click on ‘Next’ to continue installing Windows 10.

10. On the ‘Language Packs’ page in the next window, select any additional Language to be
installed (if required) and select ‘Next’ as shown below:

11. On the ‘Locale and Time’ page in the next window, verify the Settings for your Region
and select the ‘Next’ button to continue.

Microsoft Confidential | Do not Share

 8

12. On the ‘Administrator Password’ page, enter an Administrator password, Confirm the
Password and select ‘Next’ to continue. Note: This is a Password your Laptop’s Local
Admin account and not your Domain account. Note down the Password in a safe
location.
13. The next page shows the ‘Ready’ page. Verify the snapshot of the selections that were
made and select ‘Begin’ to start the Installation. Your computer may reboot
automatically.

Microsoft Confidential | Do not Share

 9

14. Your Computer will Restart a couple of times and may also display the Progress of the
Installation.

15. Once the Deployment is complete, the Summary and a successful Deployment
completion screen is shown as below. Click on the ‘Finish’ button.

Microsoft Confidential | Do not Share

 10

Microsoft Confidential | Do not Share

 11

Microsoft Confidential | Do not Share

 12

5.0 Connect to Internet

1. The Computer will Restart and display the Login window. Login with the Password that
was created for the Local Administrator account (the password which was set while
setting up your laptop)

Microsoft Confidential | Do not Share

 13

2. After the Login, Windows starts up. Click on the Network icon in the Status Tray at the
bottom right-hand side and choose the Wi-Fi Network you want to connect to.
Tip: Most likely you will connect to your home Wifi Network or Wired Network.

3. Note: The Wi-Fi Networks displayed may be different from those shown in the above
image.

4. Enter the ‘Network security key’ (Wi-Fi Password) for the Wi-Fi Network selected

Microsoft Confidential | Do not Share

 14

5. The Wi-Fi Network will ask if you want to allow your PC to be discoverable by other PCs
and devices on the Network. Select ‘No’ to continue.

Microsoft Confidential | Do not Share

 15

Microsoft Confidential | Do not Share

 16

6.0 Change Password and Register for Phone Authentication

1. Change the temporary password of your Microsoft Login ID

a. Once the Computer is connected to Internet, Open Internet Explorer and browse
to the below URL to reset the Domain Password:

https://aka.ms/InitialPW
Please fill in the below details to reset the password
domain\username : Alias name (should be shared by your manager/ Business
admin)
Current password is your temporary password (should be shared by your
manager/Business admin)

2. Register for ‘Phone Authentication’

This is a mandatory step to complete subsequent steps. Once Phone Registrations is
completed, you will use your Phone as the 2nd method of authentication.

a. Once the Domain Password is reset, browse http://aka.ms/PhoneReg to register

for ‘Phone Authentication’.
b. Click on “No smart card? Use Manager Approval”
c. Follow the instructions shown on the subsequent screens

Microsoft Confidential | Do not Share

 17

7.0 Join your laptop to Azure Active Directory (AAD)

1. Click on Start and go to ‘Settings’

Microsoft Confidential | Do not Share

 18

2. Select ‘Accounts’ on the ‘Windows Settings’ page as shown below:

3. Click on the ‘Access work or school’ link in the left side Menu to go to the ‘Access work
or school’ page and Click on ‘Connect’.

Microsoft Confidential | Do not Share

 19

4. On the next page, click on ‘Join this device to Azure Active Directory’ as shown below:

Microsoft Confidential | Do not Share

 20

5. On the ‘Let’s get you signed in’ page, enter your Microsoft Email ID
(XXXX@microsoft.com) and click on ‘Next’.

Microsoft Confidential | Do not Share

 21

6. You will need to Sign in on the next screen. Click on ‘Sign in with a username and
password instead’

Microsoft Confidential | Do not Share

 22

7. Click on ‘Sign in with your phone or token device’ on the next screen.

Microsoft Confidential | Do not Share

 23

8. Depending on how the Phone Authentication is setup, you may receive a Phone call.
Please answer it to continue and enter the PIN number that was set during the Phone
Authentication.

Microsoft Confidential | Do not Share

 24

9. The next screen will ask for confirmation that you are joining to the right Organization.
Confirm the details and click on ‘Join’.

Microsoft Confidential | Do not Share

 25

10. Click on ‘Done’ on the completion screen as shown below:

Microsoft Confidential | Do not Share

 26

8.0 Log in with Microsoft Login ID and Password:

1. Restart the Computer and login with the Microsoft credentials.

2. Your Computer will display the ‘Windows Hello’ window. You can setup your Computer
for Face Recognition or Fingerprint access for seamless signing in or you can skip for
now.

Microsoft Confidential | Do not Share

 27

3. Click on the ‘Set up PIN’ button to setup a PIN for Windows Hello.

Microsoft Confidential | Do not Share

 28

4. You will be asked to provide your Microsoft Credentials to continue setting up your
Windows Hello PIN.

Microsoft Confidential | Do not Share

 29

5. Click on ‘Sign in with your phone or token device’ to complete Phone Authentication and
continue.

Microsoft Confidential | Do not Share

 30

6. Set up the Windows Hello PIN and Confirm as shown.

Microsoft Confidential | Do not Share

 31

7. The completion screen is shown, and you are all Set. Click on OK.

9.0 Sign-in to Applications:

1. Teams should start automatically. Enter your Microsoft credentials and Click on Sign in to
continue logging into Team

Microsoft Confidential | Do not Share

 32

2. Open Outlook, enter your Microsoft Email and click on the ‘Connect’ button to continue.

Microsoft Confidential | Do not Share

 33

10.0 Install Windows updates:

Important: All Windows updates should be Run. Restart your machine after updating.

Windows updates:

1. Click on ‘Start’ and type ‘Updates’ in the Search field to display the ‘Check for Updates’.
Click on ‘Check Updates’ to start the Windows Updates.

2. Click on ‘Check for Updates’ button to initiate the Windows Update process and install
all the Updates that are displayed to be installed.

Microsoft Confidential | Do not Share

 34

Microsoft Confidential | Do not Share

 35

11.0 Install MSFTVPN:

For MAC device users, please refer to “MAC Setup” Document attached in the mail

1. On the keyboard, press the “Windows Key” + ‘I’.

2. Select Accounts. 
3. Select Access work or school.
4. Select Microsoft's Azure AD.
5. Click Info.

6. Select ‘Sync’. This should update the required Security policies. Please wait for at least 5
minutes before verifying that MSFTVPN profile has landed on your device.
7. Once the ‘Sync’ has completed, the Device Sync status will be shown as below:

8. Click on Start > Settings > Network & Internet and Choose MSFTVPN under VPN

Microsoft Confidential | Do not Share

 36

9. Click on ‘Connect’

Microsoft Confidential | Do not Share

 37

10. A message that ‘Application not found’ will be displayed and the Microsoft Store will
open automatically.

11. Click on Microsoft Store > Global Protect > Click on ‘Get’

Microsoft Confidential | Do not Share

 38

12. If you are asked if you want to use across all your devices, select ‘No, thanks’ to continue.

Microsoft Confidential | Do not Share

 39

13. Click on ‘Launch’ once Global Protect is installed.

14. Global Protect will open. Click on ‘Network & Internet VPN Settings’ as shown below:

Microsoft Confidential | Do not Share

 40

15. A prompt that ‘Global Protect’ is trying to open “Settings”.’ is displayed. Click on ‘Yes’ to
continue.

Microsoft Confidential | Do not Share

 41

16. The MSFTVPN page is displayed back as shown below. Click on ‘Connect’.

12.0 Setup your MAC device

If you will be using a Mac device for your work, you will need to install the Intune Company
Portal Application and enroll the device in Intune to access Microsoft resources 

1. Visit https://aka.ms/cpweb 
2. Select the three lines icon (hamburger) in the upper left and choose Devices 
3. Select the gray bar that says, “Tap here to tell us which device you’re using or add a
new device” to download the Company Portal app 

 
4. When the download is complete, open the install package and launch the Company
Portal application 
5. Enter the administrator credentials for the Mac device and allow the Company Portal
app access to the device keychain, when prompted 

Microsoft Confidential | Do not Share

 42

6. Open Finder and run the Company Portal app. Sign in using your Microsoft
credentials and authenticate using two-factor authentication on your mobile
device(Refer to the document “Laptop setup for new Employees”. 
7. Select Begin and follow the prompts to enroll your device in Intune 
8. Your device will automatically sync with Intune to install access certificates along with
the management profile 
9. When prompted, allow access to the device keychain again and approve the
management profile in System Preferences > Profiles > Approve button 

 
Connect remotely to Microsoft resources on a Mac 

A virtual private network (VPN) is used to access Microsoft resources when you are not at a
Microsoft location. Devices using VPN are required to be managed by Intune. You can also find
the instructions below on our VPN for Mac page. 

1. Download the Mac GlobalProtect agent from https://aka.ms/macvpninstall   

2. Open GlobalProtect to begin installation process and select Continue on the
Introduction screen 
3. On the Installation Type screen, choose GlobalProtect > Continue > Install 
4. When prompted, enter your password and select Install Software 
5. When complete, you will receive a system pop-up to allow Palo Alto Network from
System Preferences > Security & Privacy  
6. Select Open Security Preferences, choose Allow and then Close 
7. Select the GlobalProtect icon in your task bar. Enter portal address msftvpn-
alt.ras.microsoft.com and choose Connect 
8. When prompted to sign in, choose Sign in with a username and password instead.
Provide your password and choose Sign in 
9. When you receive the second authentication prompt, choose Sign in with your phone
or token device and then approve the two-factor authentication request on your
mobile device 
10. You should see that GlobalProtect is now connected. 

13.0 Seek IT Support

1. At any stage if you need assistance from the Microsoft IT Team, you can call the India
Toll-Free Number using your mobile - 000 80000 16018
2. The other way to reach out to global help desk is through Microsoft Teams by installing
“Connect Me” app, follow the below steps:
a) Go to Teams -> Click on Apps

Microsoft Confidential | Do not Share

 43

b) Type Connect Me in search bar. You will get a list of apps. Click on
“ConnectMe Support Helpdesk Bot” to get the app installed.

c) Click on Add to start the installation.

Microsoft Confidential | Do not Share

 44

d) After the app is installed you will get the below screen, you can start
chatting to raise your IT related queries.

Microsoft Confidential | Do not Share

 45

Microsoft Confidential | Do not Share