Been a long week, and I'm still working, but let me weigh in about some things that have been asked and not answered.
Once the server is authorized by AC (whole subject all it's own), and you restore the DB, then after you log in and validate the last few notes you signed are gtg, then you need to put that install to sleep.
You do that by first DISABLING interfaces. You will need to check the inbound directories for results that are pulled in by the interfaces before you shut them down.
Every time you restore, you will have to do this again.
You can use the same methodology we use for securely moving files from your test to production server, I'll cover that separately.
Next step is to go into services and stop and disable all the AC services. Depending on your version, there are 4 now.
That will effectively make that server inert until you want to bring it to life again.