As part of ¹û½´ÊÓƵ¹ÙÍø's commitment to Cyber Essentials accreditation and IT security we require that everyone who accesses our systems and services has account-level security (multi-factor authentication) in place.
In terms of device-level security, personal devices belonging to staff* and associates** who require access to university resources will first need to be enrolled with the Microsoft Intune (Company Portal) app. This service ensures that personal devices used to access ¹û½´ÊÓƵ¹ÙÍø’s systems, applications, and data meet the required security standards (compliance checks), protecting the university’s information assets while enabling seamless and secure access for users.
Students should enrol their devices (laptops, desktops, mobile phones and tablets) via the Microsoft Intune (Company Portal) app to connect to the university's Wi-Fi network. Student devices are not currently subject to security compliance checking.
Below you will find links to step-by-step guides and supporting information and a short video explaining the five-step process to set up your account and device securely. While the process is relatively straightforward, if you need help please contact us.
* Staff are only able to connect personal mobile and tablet devices; all laptops and desktops used by staff are provided and managed by the university. These are registered with the Cranfield Intune service on issue.
** External Examiners, Recognised Teachers, Visiting Academics, Emeritus Professors, Contractors and other external partners that are not employed directly by ¹û½´ÊÓƵ¹ÙÍø come under the category of associate.
Obtaining your Cranfield log-in details
Students – When your application was submitted you were given an account to access the student portal (EVE). This will become your full IT account once you start your studies with Cranfield.
Staff and Associates – You will receive an automated email inviting you to register for your IT account. This will be sent to the personal email address you provided to Cranfield. The email contains a one-time code that will allow you to access our user registration app.
Please be sure to read the IT users’ policy and procedures document, you can find it on our IT and network policies page.
Account security settings (multi-factor authentication [MFA])
Multi-factor authentication (MFA) is an extra layer of account security that checks identity when someone is trying to access a system and confirming it’s really them who is requesting access. Having MFA in place means that even if your password is compromised through a successful phishing attack, for example, it is useless without someone also knowing the additional security (authentication) method that you have in place.
It’s easy to set up MFA and the guides below will walk you through the process. We recommend downloading both the detailed guide and the Q&A document before starting the setup process.
Device security settings (Microsoft Intune Company Portal app)
As described in the IT users’ policy and procedures, we require that end-user devices meet minimum security standards. Laptops and desktops belonging to ¹û½´ÊÓƵ¹ÙÍø are managed centrally by IT Services through the Cranfield Intune service.
Service features
- Device enrolment:
Staff, students and associates can easily enrol their personal devices through the Microsoft Intune Company Portal, enabling secure access to university resources. - Security and compliance management (staff and associates only):
The service enforces university-defined security policies, including data encryption, malware protection, and mandatory device locking with passwords or PINs. Regular compliance checks ensure ongoing adherence to these policies. - Remote management:
The service allows for remote management of enrolled devices, including the ability to wipe university data in case of loss or theft, reset passwords, and push mandatory updates. - Access to university resources:
Enrolled devices can securely access email, calendars, document management systems, and other critical ¹û½´ÊÓƵ¹ÙÍø applications and data if appropriate. - Self-service portal:
To manage their devices, request support, and access troubleshooting resources.
More information about the Microsoft Intune Company Portal app can be found in the . Here you will find:
- general information about mobile device management with Intune, including an overview of device enrolment and an explanation of what Cranfield IT (the organisation) can see, cannot see or might see on and about your device
- detailed device specific how-to guides for Windows, macOS, iOS/iPadOS and Android.
Enrolling a device
Device enrolment is managed via the Microsoft Intune (Company Portal) app, which is installed as part of the Windows Operating System on laptops and desktops. For other devices it is available from the relevant app store.
Associate staff devices
If you are an associate and the device you are using to connect to Cranfield IT systems is managed in Microsoft Intune via another organisation, you may not be able to register it through us. If this affects you, we may be able to add your device to the exception group so that you can continue to access Cranfield IT systems without the need to register with Intune.
Please not that exceptions are only granted where the device you are using is either a managed corporate device from another organisation, or you have already registered it with another organisation's Intune Company Portal, and are subject to agreement with the 'End-user device - user agreement'.
To request an exception, please review and complete the . Once completed your request will be sent to the IT Security team for authorisation and processing.
Student devices
We recommend that you install the Microsoft Intune Company Portal app as it enables you to easily log in to our network and access the services you need for your learning. If the device you are using is managed by another organisation and you are not able to register it with the Cranfield Intune service there is an alternative method to configuring connection to the Wi-Fi service. Please see our for more details.
Change or reset your password
Provided you have set-up MFA as described on this page and have access to your authentication methods, you can change or reset your password yourself.
- To change your password got to , click on your profile image, select 'View account' and follow the on-screen prompts.
- To reset a forgotten password use the , enter your email address and verify using your account security information.
If you need help please contact us. You'll find our IT service desk phone number and email address under Get in touch.