CHM Library - Sanitize a Laptop

In order to sanitize a laptop, you must be a member of RSC and know the base admin password. If you are NOT a member of RSC, please bring the laptop to a member of RSC to be sanitized.

Windows

• Log in as the admin user (tanuki)

• Open powershell as an admin (start -> type “powershell” -> right-click, run as admin)

• Navigate to C:\TEMPLaptopInstall 

• Run sanitize-me.ps1

This should delete and re-create the chm-loaner and chm-admin accounts.

(if this script doesn’t exist, you can find it on Bowser: \\chm-sm-bowser.ad.wisc.edu\deploy\scripts\CHMLoaner\)

Mac

• Log in as the admin user (tanuki)

• Open terminal and switch to root (type “sudo su -” and enter the admin password)

• Insert a flash drive with the sanitization script (usually lives on the “macscript” flash drive on my desk) and navigate to it: (type: “cd /Volumes/(THE NAME OF THE DRIVE))

• Run the script by typing “sudo bash sanitize-me-chm.sh”

• Make sure to verify that the computer has full disk access turned on (i.e. read and follow the instructions)

This should delete and re-create the chm-loaner and chm-admin accounts. After you’ve recreated the users, make sure to enable these “new” users to unlock filevault (System Preferences -> Security & Privacy -> Filevault -> Enable Users

(if this script doesn’t exist, you can find it on Bowser: \\chm-sm-bowser.ad.wisc.edu\deploy\scripts\CHMLoaner\)