Share the computer, keep separate accounts
A shared computer does not need a shared staff identity. Give each employee an account so the school can assign the right permissions and keep access connected to the person using it.
In SMS, rights belong to roles. Review those roles when responsibilities change, and avoid granting broader access just to make one task convenient.
Use the PIN and lock screen
On an enrolled SMS computer, a personal PIN offers a quick way to unlock the application. Lock the screen before stepping away and use the available idle-lock setting as another layer.
A PIN belongs to its account holder. Keep it private, along with passwords, sign-in codes and recovery answers. Follow the account’s offered recovery process if it is forgotten.
Review the computers with access
Users can review their trusted SMS devices and remove ones they no longer use. Authorised school administrators also have school-level device controls, with actions depending on the device and edition.
If a computer is lost, report it promptly. A remote lock or wipe requires the device to communicate with the service; it cannot remove reports already exported elsewhere.
Make access part of staff handover
When a colleague changes duties or leaves, review the account’s role, device access and any local school-data copies. Keeping access current is a regular school task, alongside checking updates and backups.