Static reading view · English / Deutsch
01 / 07 · Unboxing
A new day.
An empty device.
In plain words: It is Jana’s first day. Her new laptop is still in its box. Before she can work, IT has to register it, connect it and set it up.
It is Jana’s first day. Her laptop is unpacked — but without a network, operating system or identity, it is not a workplace yet.
Register the asset, assign the device, connect power. Automation starts with a reliable inventory.
- Terms
- Client
- The device someone works on. Here: Jana’s laptop.
02 / 07 · The network
Jana’s laptop
says hello.
In plain words: The laptop is plugged into the company network, like a car joining the right road. A firewall makes sure it only goes where it is allowed to.
The network is the first point of contact. Jana’s device joins the client VLAN; the firewall controls the path to the services.
The laptop starts on a wired dock. The access point serves wireless clients; two independent uplinks protect the switch-to-firewall connection in this model.
- Terms
- VLAN
- Separate “lanes” on the same cabling.
- Firewall
- A gatekeeper between networks: it lets only permitted traffic through.
- Access point
- A transmitter for the Wi-Fi.
- Uplink
- The link between two network devices, here between switch and firewall.
- Switch
- A cable distributor: it connects all devices in the building.
If the active uplink fails, transmission pauses briefly. The independent alternate path takes over; this does not protect against a failed client connection.
03 / 07 · Address (DHCP)
Four messages.
One address.
In plain words: Every device on the network needs its own address, like a house number for the post. The laptop asks, a server answers. After four short messages it has one.
The laptop asks and the DHCP server replies. An address, gateway and DNS turn an unknown device into a reachable participant.
Discover, Offer, Request, Acknowledge: the client may use the offered address only after the server confirms it.
- Terms
- DHCP
- Hands out network addresses automatically.
- DNS
- The network’s phone book: it turns names into addresses.
- DISCOVER · Laptop → everyone
“Is there anyone who can give me an address?”
- OFFER · DHCP → laptop
“I can offer 10.20.0.42. Your gateway is 10.20.0.1.”
- REQUEST · Laptop → everyone
“I would like to accept this offer from DHCP-01.”
- ACK · DHCP → laptop
“Confirmed. The address is reserved for you. DNS: 10.20.0.10.”
04 / 07 · Operating system (PXE)
One boot.
No USB stick.
In plain words: The laptop has no Windows yet. It fetches it over the network, without a USB stick, and gets exactly the version IT has approved.
The laptop boots into deployment over the network. PXE delivers the boot environment; the deployment solution installs the operating system and drivers.
UEFI network boot → boot environment → approved image → drivers. Keeping these steps distinct makes rollout repeatable.
- Terms
- PXE
- Starting over the network instead of from a USB stick.
05 / 07 · Sign-in (AD)
One name.
The right access.
In plain words: Jana signs in with her name and password. A central directory knows who she is and what she may do.
Jana signs in with her domain account. Active Directory verifies her identity; groups and policies manage access.
DNS locates the domain controller. Kerberos authenticates the account, Group Policy configures the workstation and groups restrict file access.
- Terms
- Active Directory
- A central directory for accounts, groups and permissions.
- DNS
- The network’s phone book: it turns names into addresses.
06 / 07 · Software (UEM)
Everything ready.
Before work starts.
In plain words: All the programs Jana needs are installed automatically. IT can also see whether it really worked.
baramundi deploys approved software to the managed client. Assignments, installation status and inventory remain centrally traceable.
Packages are assigned by device and user. A successful job requires a verifiable result — not merely an installer that was started.
- Terms
- UEM (baramundi)
- Management that brings programs and settings to devices. baramundi is one such product.
07 / 07 · Backup
Work begins.
Protection stays.
In plain words: Jana’s files are saved in a second place. Whether they can be brought back is tested. Only then is the workstation truly protected.
Jana’s files live on the file server and are backed up. A separate backup and a verified restore protect them when redundancy alone is no longer enough.
Redundancy keeps services available. A backup recovers lost data; this model therefore also restores a file as a test.
- Terms
- Backup · restore
- A backup is a copy of the data in another place. A restore brings it back.
- Redundancy
- Important parts exist twice so operation continues when one fails.
Good morning, Jana.
Model time: 35 minutes
The time is shown compressed. It is neither measured nor compared with another approach.