Client management recommendations

Here you will find our recommendations for different categories of client management.
Category Recommended
Operating system for a managed workstation Windows 11
Default mail client Outlook 2019
System for operating system and software distribution OPSI
Addition of computers to the KIT-AD yes
Use of explicit administration accounts for the management of IT services yes
Hard Disk Encryption yes


Standard workstation setup

Translated with

The following checklist describes the installation and configuration of a Windows workstation and thus ensures the use of the KIT's basic IT services.

In addition to a standard workstation computer, other aspects are important for secure working in the home office. More information under Secure home office.

Action Instructions Instructions
Procurement of standard hardware from state tender LZBW devices Office store - Logistics Center Baden-Württemberg - LZBW To gain access to the LZBW office store, complete the customer master data sheet and send it to the LZBW customer service at kundenservice∂
Installation Windows 11 with activation via Key Management Service Service description Windows Key Management Service (KMS) Versions and variants of Windows 11
Configuration of Windows 11 with regard to data protection and   Data protection with Windows 11 at KIT
Integration into the directory service Active Directory of the KIT Service description KIT Active Directory This means that the central group policies can be used to configure the system efficiently.
Configuration of the KIT group policies Service description of group policies (GPOs) List of GPOs for the implementation of data protection and IT security recommendations
Hard disk encryption
Set up
Instructions for device and disk encryption  
Connectingpatch management Service description Microsoft Update Service (WSUS)  
Set upvirus protection Service description virus protection  
Set upnetwork to the service descriptions of the network services at KIT  
Set upVPN client Service description Remote Access (VPN)  
Connecting datastorage for organizational units (OU directory) Service description KIT data storage (OU directory) If required
Connect personal data storage (HOME directory) Service description KIT data repository ( personal directory)  
Install the required software To the KIT software store

Software for example:

  • MS-Office 2021 (download folder)
  • Anydesk client for remote administration
  • 7-Zip
  • PDF reader Adobe Acrobat Reader Classic
  • bwSyncAndShare client
  • Chrome Browser
  • Firefox Browser
  • IrfanView
  • MS Teams client
  • Text editor Notepad++
  • PDF tool PDF24
  • Paint.Net
  • VLC Media Player
KIT account required


Integrate central printers Service description Print & Plot - Central print service