There may be a requirement to protect a PC that is not joined to the domain.
We have a solution for this. It is fairly easy to set up, but there are a few extra prerequisites needed in order to get this working
Please note: For initial set up the machine must be connected to the same network even if it is not joined to the domain.