How do I make Windchill read only?

We are retiring Windchill Intralink 9.1 soon, and migrating to a different PDM.
However, we want to keep Windchill running as read-only for a few months in case we discover any files that were not migrated.

My first thought was to make all vaults read-only. But is that enough?

Will users still be able to revise, check-out, or promote?
All we want is for users to be able to "Add to Workspace" in Pro/E so they can export afterward.

I'm hoping to avoid using the Policy Administrator to change Domain permissions.

(It's been years since I've created/changed those.)

Gerry Champoux

Williams International