How To Secure Workshop Computers

Summary

This guide helps you troubleshoot and resolve: How To Secure Workshop Computers. Follow the steps below to fix the issue.

Common Causes

Workshop and manufacturing environments often rely on shared industrial computers or shop floor workstations to run specific production software. Because multiple staff members may use the same machine, it is essential to restrict access to unauthorised applications and system settings. This guide outlines how to secure workshop computers by limiting user permissions, restricting software installations, and managing local administrator rights.

Detailed Instructions

Creating Standard User Accounts

1. Click the Start button and select Settings.
2. Navigate to Accounts > Family & other users.
3. Click Add account under the Other users section.
4. Select I don't have this person's sign-in information, then choose Add a user without a Microsoft account.
5. Enter a username and password for the workshop staff member, then click Next.

Removing Local Administrator Rights

1. Right-click the Start button and select Computer Management.
2. Expand Local Users and Groups and click Groups.
3. Double-click Administrators to view group members.
4. Select the standard workshop user account and click Remove.
5. Click Apply and then OK to save the changes.

Restricting Software Installations

1. Press Windows key + R, type gpedit.msc, and press Enter to open the Local Group Policy Editor.
2. Navigate to Computer Configuration > Windows Settings > Security Settings > Software Restriction Policies.
3. If no policies are defined, right-click Software Restriction Policies and select New Software Restriction Policies.
4. Configure enforcement rules to prevent users from running unauthorised executables.
5. Add approved production software paths to the allowed list so staff can access necessary tools.

Managing Approved Software Installation

1. Log in with an administrator account.
2. Download the required software from the vendor's official website.
3. Right-click the installer file and select Run as administrator.
4. Follow the installation prompts to complete the deployment.
5. Log out and log back in as a standard user to verify the software functions correctly without administrator privileges.

Troubleshooting

Approved software will not launch

• Check that the application folder is included in the Software Restriction Policies allowed list.
• Verify the standard user account has read and execute permissions for the application directory.
• Confirm the software does not require administrator rights to run; contact the vendor if it does.

Unable to install software as administrator

• Ensure you are using an account that is a member of the local Administrators group.
• Right-click the installer and select Run as administrator.
• Check if antivirus or endpoint protection is blocking the installation.

User cannot access shared workshop resources

• Verify the user account has been granted permissions on the shared folder or network drive.
• Check that the computer is connected to the correct network domain or workgroup.
• Confirm the user is not accidentally logged into a guest account.

By applying these lockdown measures, your organisation can maintain operational stability on the shop floor while reducing the risk of unauthorised changes or malware infections. If you need assistance implementing these policies across multiple workshop computers, please contact your IT support team.

Still Having Issues?