3 ms·

Lol absolutely don't use the MSIT image you get from PXE boot on corpnet. Install a clean Windows 10 Enterprise image then do a domain join to Microsoft's Azure

Lol absolutely don't use the MSIT image you get from PXE boot on corpnet. Install a clean Windows 10 Enterprise image then do a domain join to Microsoft's Azure Active Directory instance. Also forgot to mention open a Fidelity BrokerageLink account for your 401k.

barik 7y ago
> Also forgot to mention open a Fidelity BrokerageLink account for your 401k. I thought about adding it, but BrokerageLink requires a minimum balance transfer. By then, I figure that people will find out about invclub if they want to pursue more custom strategies. I also added the note about the fresh Windows 10 Enterprise install. Ultimately, it's a wash. The group policy will apply one way or another.
hyperrail 7y ago
2 points of disagreement: - "Don't use the MSIT image you get from PXE boot on corpnet": The customized Microsoft-internal image works fine, and saves you time installing Office. You can't avoid "MSIT shovelware" by installing clean Windows; if you join corp.microsoft.com AD or @microsoft.com AAD, the same software will still be pushed to your PC eventually via System Center Config. Mgr. and Microsoft Intune. In any case, soon you won't be able to do network boot to install anyway, either plain Windows or the customized Microsoft-internal image. CSE&O (Microsoft's IT department) intends to shut down the Windows Deployment Services network boot servers as part of its overall thrust to make the corporate network unnecessary and move Microsoft entirely to the cloud. - "domain join to Microsoft's Azure Active Directory instance": If the machine is a desktop, I recommend you join to on-premise AD instead ([location].corp.microsoft.com). If you join your PC to AAD, you can connect to it via Remote Desktop only from another box that is also AAD-joined or on-premise-AD-joined. Which means if you want to work from home without a laptop by TSing/RDPing into your desktop, you won't be able to avoid joining your home computer to AAD - negating the current advantage of the CSE&O RD Gateway. In addition, the management policies are slightly different between @microsoft.com AAD joined machines and on-premise-AD-joined boxes. Usually this is to the detriment of dev work on the AAD-joined boxes.
- nlawalker 7y ago
  >> If you join your PC to AAD, you can connect to it via Remote Desktop only from another box that is also AAD-joined or on-premise-AD-joined. You can connect from a non-joined machine, but you have to disable some of the security features of RDP 6.0: https://support.microsoft.com/en-us/help/941641/remote-desktop-connection-6-0-prompts-you-for-credentials-before-you-e https://support.microsoft.com/en-us/help/941641/remote-deskt... I use this to RDP to my AAD-joined laptop from my non-joined home desktop.
- deleted 7y ago
  [deleted]

barik 7y ago

> Also forgot to mention open a Fidelity BrokerageLink account for your 401k. I thought about adding it, but BrokerageLink requires a minimum balance transfer. By then, I figure that people will find out about invclub if they want to pursue more custom strategies. I also added the note about the fresh Windows 10 Enterprise install. Ultimately, it's a wash. The group policy will apply one way or another.

hyperrail 7y ago

2 points of disagreement: - "Don't use the MSIT image you get from PXE boot on corpnet": The customized Microsoft-internal image works fine, and saves you time installing Office. You can't avoid "MSIT shovelware" by installing clean Windows; if you join corp.microsoft.com AD or @microsoft.com AAD, the same software will still be pushed to your PC eventually via System Center Config. Mgr. and Microsoft Intune. In any case, soon you won't be able to do network boot to install anyway, either plain Windows or the customized Microsoft-internal image. CSE&O (Microsoft's IT department) intends to shut down the Windows Deployment Services network boot servers as part of its overall thrust to make the corporate network unnecessary and move Microsoft entirely to the cloud. - "domain join to Microsoft's Azure Active Directory instance": If the machine is a desktop, I recommend you join to on-premise AD instead ([location].corp.microsoft.com). If you join your PC to AAD, you can connect to it via Remote Desktop only from another box that is also AAD-joined or on-premise-AD-joined. Which means if you want to work from home without a laptop by TSing/RDPing into your desktop, you won't be able to avoid joining your home computer to AAD - negating the current advantage of the CSE&O RD Gateway. In addition, the management policies are slightly different between @microsoft.com AAD joined machines and on-premise-AD-joined boxes. Usually this is to the detriment of dev work on the AAD-joined boxes.

nlawalker 7y ago
>> If you join your PC to AAD, you can connect to it via Remote Desktop only from another box that is also AAD-joined or on-premise-AD-joined. You can connect from a non-joined machine, but you have to disable some of the security features of RDP 6.0: https://support.microsoft.com/en-us/help/941641/remote-desktop-connection-6-0-prompts-you-for-credentials-before-you-e https://support.microsoft.com/en-us/help/941641/remote-deskt... I use this to RDP to my AAD-joined laptop from my non-joined home desktop.
deleted 7y ago
[deleted]