Windows Image Creation

Instructions

  1. Go to launch instance option

  2. Choose the required AMI (platform required for the lab)

  3. Choose all the options as mentioned in the requirements and go to the next instance

  4. We need a key-value pair to secure our instance, so add a tag for the key-value pair.

  5. Choose the most appropriate security group (select an existing security group, more often than not, it’s the default)

  6. click launch instance. Select the key-value pair (instance_key).

  7. Go to running instances list. Give your instance a name, as it just creates a blank one.

  8. Right-click on the name and click connect (at this point we need to have our own key-value pair chosen). Download RDP and create a password.

  9. Choose instance_key.pem from your personal machine and decrypt password. Save this password temporarily.

  10. Click RDP file and remote login.

  11. Windows image must launch.

  12. We need to make a few administrative changes for security reasons. Go to the cmd pmt(command prompt)

  13. cd.. (to change directory)

  14. net user administrator ‘password’ (in pace of password, enter your password)

  15. To disable enhanced security for IE. Follow the steps below to do that:

  16. Keeping the Internet Explorer Enhanced Security Configuration enabled on your servers is recommended to help ensure that your servers are not inadvertently exposed to malware or other browser-based attacks. However in some environments, you might wish to turn off the Internet Explorer Enhanced Security Configuration protections to enable easier browsing for administrators or standard users.

  17. To turn off Internet Explorer Enhanced Security Configuration

  18. Close any Internet Explorer browser windows that you might have open.

  19. Open Server Manager

  20. If your server is running Windows Server® 2008 R2, in the Security Information section of Server Summary, click Configure IE ESC to open the Internet Explorer Enhanced Security Configuration dialog.

  21. If your server is running Windows Server® 2012, click Configure this local server to open the Local Server configuration page. Then, in the Properties area, next to IE Enhanced Security Configuration, click On to open

the Internet Explorer Enhanced Security Configuration dialog.

  1. To allow members of the local Administrators group to use Internet Explorer in its default client configuration, under Administrators click Off.

  2. To allow members of all other groups to use Internet Explorer in its default client configuration, under Users click Off.

Note: Once the Internet Explorer Enhanced Configuration is turned off for one set of users, Server Manager will display Off next to Internet Explorer Enhanced Security Configuration.

  1. Click OK to apply your changes.

Server manager is our local server, we have to turn off Internet explorer’s enhanced security configuration for admin and users.

Download all software packages required for the class from any browser and store it on a folder called starter kit.

After installing softwares, disconnect from the machine. Go to EC2 console and test the instance. To create another image from an existing image, right click on the existing image and go to image, image create. It will give an AMI –ID, which we will have to feed into the system while creating the new image. Make note of AMI number Go to AMI on left panel

TIP: close all personal mail and delete all personal downloads and files from the system before logging off from the system as the machine recreates from the previous snapshot.

TO add this class image to VCL dashboard

  1. Go to https://ischoolvcl.umd.edu/admin/

  2. Go to computerlabs

  3. Enter the details of the class.

  4. http://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ec2-windows-passwords.html#change-admin-password