Windows Installation and Post-Install Configuration

Windows Installation and Post-Install Configuration

Installing an operating system from scratch is one of the most fundamental skills an IT support technician performs. A clean installation wipes the target drive and places a fresh copy of Windows on it, giving you a known-good starting point free of previous software conflicts or malware. This lesson walks through every stage: creating verified bootable media, configuring firmware settings, partitioning the drive, completing setup, and bringing the system fully up to date.

Safety and Workplace Practices

Before handling any lab PC, power it off completely and unplug the power cord. Use proper electrostatic discharge (ESD) precautions—wear an anti-static wrist strap connected to a grounded surface whenever you open a case or handle internal components such as drives or expansion cards. Keep your workspace clear of liquids. If a PC must remain powered during any step (for example, to access UEFI settings), keep fingers away from exposed boards and cables. Never force connectors; incorrect seating can damage hardware.

Data loss is irreversible once a drive is formatted. Before touching any machine that may contain real data, confirm with your instructor that the drive is blank or that data has been backed up.

Creating Verified Bootable USB Media

Microsoft distributes Windows 10 and Windows 11 installation media through the Media Creation Tool, available free from Microsoft's official download page. The tool downloads a genuine ISO image and can write it directly to a USB drive, or you can save the ISO and use a separate utility such as Rufus.

Before writing the ISO, verify its integrity using its SHA-256 hash. Microsoft publishes the expected hash value on the download page. On Windows, open PowerShell and run:

```

Get-FileHash C:\path\to\windows.iso -Algorithm SHA256

```

Compare the output to the published value character by character. A mismatch means the file is corrupt or tampered with; discard it and download again. This step protects you from installing a compromised operating system.

When writing to USB with Rufus (if used), select GPT partition scheme for UEFI-based systems and NTFS as the file system. The USB drive must be at least 8 GB; its contents will be erased.

UEFI/BIOS Configuration and Boot Order

Modern PCs use UEFI (Unified Extensible Firmware Interface) instead of the older legacy BIOS. UEFI provides faster boot times, support for drives larger than 2 TB, and Secure Boot, which prevents unsigned code from loading at startup.

To boot from USB, restart the PC and press the manufacturer's firmware key (commonly F2, F10, F12, or Delete) immediately at power-on to enter UEFI setup. Locate the Boot Order or Boot Priority menu and move the USB drive to the top. Save and exit. The system will restart and load the Windows installer from the USB drive.

Enable Secure Boot unless a specific lab exercise requires it off. Confirm the firmware is set to UEFI mode, not legacy (CSM) mode, for a modern Windows installation using GPT disks.

Partitioning the Drive

When the installer reaches the "Where do you want to install Windows?" screen, select the target disk and click Drive options (advanced). Delete all existing partitions to start clean, then click New to let the installer create the required partitions automatically. On a UEFI system, Windows creates:

• A small EFI System Partition (ESP) formatted FAT32
• A Microsoft Reserved Partition (MSR)
• The primary Windows (C:) partition formatted NTFS
• A Recovery partition containing Windows Recovery Environment (WinRE)

Allow the installer to manage partition sizes automatically unless your instructor directs otherwise. Manually changing these sizes can prevent recovery tools from working.

Out-of-Box Experience (OOBE) and Local Account Setup

After files copy and the system reboots, Windows starts the OOBE—the guided first-run setup. For lab environments, create a local account rather than signing in with a Microsoft account. On Windows 11, the installer may push toward a Microsoft account; choose "Sign-in options" or, on some builds, temporarily disconnect from the network to reveal the local account path.

Set a strong password and security questions. Decline optional telemetry and advertising settings as directed by your instructor.

Post-Install: Drivers and Windows Update

Immediately after the desktop appears, open Device Manager (right-click Start → Device Manager). Any device with a yellow exclamation mark (!) lacks a proper driver. Common missing drivers include network adapters, chipset controllers, and audio.

To find correct drivers, identify the PC's make and model (check the label on the case or run `msinfo32`), navigate to the manufacturer's official support site, and download drivers for your specific model and Windows version. Install them one at a time and reboot as prompted. When finished, Device Manager should show no yellow exclamation marks.

Next, open Windows Update (Settings → Windows Update) and check for updates. Install all critical and important updates. This may require several reboots and repeated checks until no critical updates remain. Keeping Windows current closes known security vulnerabilities and ensures hardware compatibility.

Documenting Your Work

Throughout every step, record your actions in the lab log: the ISO hash value and result, UEFI settings changed, partition layout created, drivers installed (name, version, source URL), and Windows Update history. Accurate documentation is a professional habit that helps you and others troubleshoot future issues and proves the work was done correctly.