We use dedicated Laptops, no personal software allowed, which we load the SST, manuals, parts catalogues onto along with MS Office.
The Internet interface is loaded to eng. preference i.e. IE or Firefox, with the home page defaulted to either our own website or the Canon Dealernet. We also have to limit the websites available.
It's pretty much draconian but we used to allow much more freedom with the laptops but were forever clearing out viruses etc, from 'inapropriate'

websites and haveing to sort problems from incompatible software.