Account and Device Use.
Know the boundary.

Individual accounts

Each person must use their own approved identity. Shared mailboxes, service accounts and application identities may be used only for their intended function.

Do not share Microsoft 365, Plex, remote-access or administrative credentials, invitations or sessions. Use the correct personal or organisational account when prompted, and do not approve access you did not initiate.

Passwords and authentication

• Use a unique password and keep it private.
• Use multi-factor authentication wherever it is configured or supported.
• Use Windows Hello, Microsoft Authenticator or another approved sign-in method where assigned.
• Keep recovery information current and store recovery keys securely.
• Never send a password, authentication code, recovery code or API key to Support.
• Report unexpected sign-in or approval prompts immediately.

Approved and managed devices

A device may be Microsoft Entra joined or registered, enrolled in Microsoft Intune, managed through another approved method, or approved only for a specific service. These states are not interchangeable, and requirements may vary by device and user.

Keep the operating system and applications supported and updated. Do not enrol an unapproved device, remove a management profile or transfer a managed device to another person without guidance.

Security controls

Required endpoint protection, firewall, encryption, update, compliance, monitoring and sign-in controls must remain enabled where configured. Do not disable a control as a general troubleshooting step or attempt to bypass a compliance requirement.

Use approved applications from Company Portal, CamCore Software or an official vendor source. Unlicensed, pirated, malicious or knowingly unsafe software is not permitted on a managed device.

Data, synchronisation and recovery

Allow approved synchronisation and backup processes to complete. Before unlinking an account, changing a user profile, resetting a device or removing management, identify local-only files and confirm that recovery access is available.

Do not treat a sync service as a substitute for every backup unless CamCore has explicitly documented that protection. Recovery keys and sensitive credentials must not be placed in ordinary tickets or shared documents.

Lost, replaced or retired devices

Report a lost or stolen device immediately. CamCore may revoke sessions, reset credentials, remove secure-network access, retire the device record or take other protective action.

Before replacement or retirement, confirm required data, applications, licences and authentication methods. Access and management should be removed deliberately rather than left stale.

Support

Use CamCore Support for account, sign-in, Company Portal, OneDrive, device or approved-application problems. Include the device name, affected account, exact error and the approximate time—but never credentials or recovery secrets.