Designer XI Recommendations
For client devices that run Designer XI, the application provides users with access to an important asset of the organization: its GIS data. As such, it is important to secure that data against theft.
For Windows, refer to Microsoft's documentation on BitLocker.
Recommendations specifically for securing client devices:
-
Enable full disk encryption on devices that host Solution Center.
-
Configure screen lock timeout for a maximum of five minutes.
-
For Windows specific settings:
-
Do not grant local administrator privileges to end users.
-
Do not grant end-user account permissions to install applications.
-
Use application “allow-listing” to permit only approved applications or executables to run.
-
Use real-time endpoint protection to detect unauthorized changes to installed components.
-
Schneider Electric recommends you give users access only to secure locations determined by your IT department. File permissions are managed by the user’s Windows profile.
-
Uninstalling the Application and Transferring Equipment
Uninstall the application using Control Panel or System Settings. When you uninstall the application, the user-specific files and configurations are left untouched in these user folders:
-
C:\Users\username\AppData\Local\DesignerXI
-
C:\Users\username\AppData\Roaming\SE
In this manner, if the user re-installs the application, the settings are preserved. However, if your organization intends to transfer the equipment to another user, you should follow best practices for the secured deletion of the previous user’s AppData directories. Refer to the File Directories and Files Types topic in the Designer XI Implementation Guide for more information.