Client management recommendations

Here you will find our recommendations for different categories of client management.
Category Recommended
Recommendations
Operating system for a managed workstation Windows 11
Default mail client Outlook 2019
System for operating system and software distribution OPSI
Addition of computers to the KIT-AD yes
Use of explicit administration accounts for the management of IT services yes
Hard Disk Encryption yes

 

Standard workstation setup

Translated with DeepL.com

The following checklist describes the installation and configuration of a Windows workstation and thus ensures the use of the KIT's basic IT services.

In addition to a standard workstation computer, other aspects are important for secure working in the home office. More information under Secure home office.

Action Instructions Instructions
Procurement of standard hardware from the Bechtle wish list   The standard devices can be found in the watch list "Selected & configured from AK Clientmanagement" on the start page.
Installation Windows 11 with activation via Key Management Service Service description Windows Key Management Service (KMS) Versions and variants of Windows 11
Configuration of Windows 11 with regard to data protection and   Data protection with Windows 11 at KIT
Integration into the directory service Active Directory of the KIT Service description KIT Active Directory This means that the central group policies can be used to configure the system efficiently.
Configuration of the KIT group policies Service description of group policies (GPOs) List of GPOs for the implementation of data protection and IT security recommendations
Hard disk encryption
Set up
Instructions for device and disk encryption  
Connecting patch management Service description Microsoft Update Service (WSUS)  
Set up virus protection Service description virus protection  
Set up network to the service descriptions of the network services at KIT  
Set up VPN client Service description Remote Access (VPN)  
Connecting data storage for organizational units (OU directory) Service description KIT data storage (OU directory) If required
Connect personal data storage (HOME directory) Service description KIT data repository ( personal directory)  
Install the required software To the KIT software store

Software for example:

KIT account required

 

Integrate central printers Service description Print & Plot - Central print service