The way devices and access to University systems are managed is changing as part of ongoing security improvements across the University.
These changes help protect University systems, devices and data, while supporting the University's Cyber Essentials requirements.
These changes affect all staff who access University systems or data.
The security improvements apply to both University-provided devices and personal devices used to access University resources.
This includes devices supplied by the University, such as:
This includes personal devices used to access University resources such as email, Microsoft 365, shared drives or finance systems.
This may include:
Multi-Factor Authentication (MFA) provides an additional layer of security when signing in to University systems.
In addition to your username and password, MFA requires a second verification method, such as:
Many University systems already use MFA, and this campaign expands protection to additional services where MFA is not yet enabled.
Microsoft Intune is a cloud-based Mobile Device Management (MDM) solution used to help secure devices that access University systems and data.
This includes both University-managed and personal devices.
Intune helps ensure devices meet security requirements by checking that they are:
To do this, a management profile may be installed on your device.
The University cannot access personal photos, files or personal applications on your device.
Intune supports devices running:
As part of the University's security improvements, local administrator access will be removed from standard staff accounts.
This helps reduce the risk of malware or unauthorised software affecting University systems if a device is compromised.
If you require admin access as part of your role, you can submit a privileged access request through the ICT Service Desk.
If admin access is approved, a separate account will normally be provided for adminstrative tasks. This account should only be used when required for admin-related activities.
The University is also working to provide approved software through self-service installation options, reducing the need for admin access in many situations.