clean up

remove dev defaults. set base for all media lab machines.
We'll do a separate role for admin machines