Banker Workstation Setup and Provisioning SOP

Standard operating procedure for imaging, configuring, and provisioning a new banker workstation with core banking access, least-privilege permissions, and documented verification.

Steps

• Verify the workstation request and authorization
  The IT technician verifies that the workstation request includes the banker name, manager approval, device identifier, required applications, and requested access level. The technician confirms that no missing approvals remain before proceeding.
• Inspect and identify the device
  The IT technician confirms the device serial number, asset tag, and model against the inventory record. The technician records any visible damage, missing components, or discrepancies before imaging begins.
• Image the workstation with the approved standard build
  The IT technician applies the approved operating system image and standard configuration baseline. The technician confirms that encryption, endpoint protection, and required management agents are installed as part of the build.
• Join the workstation to the approved management domain
  The IT technician joins the workstation to the approved domain or management tenant and confirms that device policies, security baselines, and software deployment rules apply successfully.
• Provision the banker user account and core application access
  The IT technician creates or activates the banker account, assigns the approved role-based access profile, and enables only the applications required for the banker role. The technician avoids granting shared, administrative, or excessive privileges.
• Apply least-privilege permissions and remove nonessential access
  The IT technician removes local administrator rights, disables unnecessary software, and confirms that file, folder, and application permissions follow the approved least-privilege standard. The technician documents any exception and routes it for approval if a business need exists.
• Test core banking connectivity and required peripherals
  The IT technician signs in with the banker account and verifies access to the core banking application, email, printer, scanner, and any branch-required peripherals. The technician records any failed connection or application error for remediation.
• Document completion and escalate any non-conformance
  The IT technician records the device serial number, image version, assigned user, access profile, test results, and any deviations from the standard build. The technician escalates unresolved issues, access exceptions, or failed verification results to the appropriate supervisor or service owner.