For Robotic Process Automations (RPA), robots are typically run in virtual machines (VMs).

In production scenarios, place these VMs in a virtual private network with limited access. Furthermore, you should configure Windows to automatically log into these machines and automatically start the Pega Robotic Automation Runtime application when the session starts. This way, administrators do not need to manually log into the machines but can instead write scripts to turn the virtual machines on and off. Even though they are unlocked, these machines cannot be accessed because they are in a virtual network with no inbound access.

If you are using a physical machine instead of a VM, the process is equivalent except the additional protection of a locked, preferably badge-governed room is required.