Swift Group – New User and Device Setup
Complete onboarding process for new Swift Group users and devices.
Audience: LTC Technicians | Time: 90–120 minutes | Prerequisites: New Lenovo laptop, O365 admin access, RMM access
Setting Up the O365 Accounts
- Create a User Account in Office 365. Use the MSFT given password and don't require the user to change it at first login.
- Allocate the correct licenses to the user (confirm with client which licenses are needed).
- Enable MFA from within Office 365 for the user.
- Add the user to all relevant SharePoint groups (confirm with client which groups are appropriate).
- Enroll the user in MFA using TOTP, and record the QR code.
- Add the username, password, QR code, and a 6-digit PIN to the Signal Channel for reference.
Security notes
- Enroll MFA using TOTP for maximum compatibility.
- Store the QR code securely — the user will need it to set up their authenticator.
- Post credentials to Signal Channel immediately for team reference.
Setting Up the Laptop (Offline Phase)
- Interrupt the OOBE and set up the device without Internet under the user ltcadmin with a regular password.
- Once at a desktop, connect the device to the Internet.
- Download Lenovo Commercial Vantage from the Microsoft Store.
- Update the Lenovo firmware using Commercial Vantage.
- Update/patch Windows fully (reboot as needed until all updates are complete).
- Test Sound and Camera. If the Camera has a vanity slider, place it in the off position (not closed).
OOBE interrupt
- Press Shift+F10 to access command prompt during OOBE if needed.
- Select "I don't have internet" or "Set up for work or school" > "Domain join" to proceed offline.
- Complete firmware updates before installing any other software.
Software Installation and PC Rename
- Install Chrome. Do not sign in or set it as the default browser.
- Install Adobe Acrobat Reader and set it as the default for PDF.
- Rename the PC to the next available number (SG-LP-0XX).
- Reboot the device.
- Install the RMM and approve if necessary.
Naming convention
Format: SG-LP-0XX (Swift Group - Laptop - Number). Check existing devices to determine the next available number. Update internal inventory tracking after rename.
Join Entra and Configure User Profile
- Join Entra using the user's new Office 365 account.
- Use the 6-digit PIN previously added to the Signal Channel.
- Once at a desktop, confirm that Edge is logged in as the user.
- Navigate to Office 365 and download and install the Office application.
- Open Word and confirm the license agreement.
- Install any Office updates.
- Set Teams to auto start.
- Open Outlook and configure for the user.
Entra join process
Settings > Accounts > Access work or school > Connect > Join this device to Azure Active Directory. Sign in with the user's O365 credentials. Set up Windows Hello PIN when prompted.
Final Configuration and Shipping
- Set the time zone to automatically detect.
- Launch OneDrive and configure Backup for Documents, Pictures, and Desktop.
- Pin Outlook to the taskbar.
- Make the OneDrive and Latitudes icons always visible in the system tray.
- Set sleep time to 4 hours when plugged in.
- Install the Microsoft App.
- Box and ship the device to the user.
Before shipping
- Test the user login one final time.
- Verify OneDrive sync is functioning.
- Confirm RMM is reporting to the dashboard.
- Include setup instructions and MFA QR code in the shipping package.