My guess - I bet no one knows how to do it. Despite the IT support guys being able to do it, who knows how diluted this knowledge gets the further away the machine gets from them.
My other half was wondering how she could protect her work lap top the other day. I said to ask the IT coordinator, who is a seagull manager - you only see him every so often and he craps all over everything. So the first job is to find him and see if he actually knows. If not, I guess we’ll be looking it up on Microsoft’s support site some time.