Moore County Schools is primarily a Google EDU shop. Microsoft products are additionally available to staff. Accounts grant access to organizational data and as a result, personal account security is an expectation of ALL MCS employees.
MCS Requires 2FA
Moore County Schools requires 2-factor Authentication (2FA) for access to enterprise data (Google G-Suite email, drive files, etc.), and for remote access to the enterprise network via Virtual Private Network (VPN) clients. Due to the ever-increasing cybersecurity risks faced by businesses and government entities, 2-factor authentication is best practices and a requirement to acquire Cyber Liability Insurance.
2FA works by combining two requirements to permit access:
Something You Know - your account username and password
Something You Have - a mobile device
While usernames and passwords are constantly at risk, either due to phishing or poor user password control, an attacker will not have access to the physical device that enables login to be completed. In addition, the alerts on the mobile device can serve as an alarm that the ‘Something You Know’ has been compromised and needs to be changed.
MCS will continue expanding 2FA to protect core services, protecting user data and core services.
Setting up your 2FA
Self-Service 2FA
For all staff with smart phones and MCS Google accounts please see the links below for steps on securing your account:
Guide (step-by-step)
Video
For staff that received device keys please see the link below for steps on securing your account:
Guide (step-by-step)
Video
Assisted 2FA
Assistance is available in your school's Media Center. A Chromebook will be available along with printed instructions. Tech, DIFS, Media and Tech and Inventory Assistants will be available for assistance.
Keeping Your Account Secure
Sharing your account information, or using another user's account information are in violation of Moore County Schools Acceptable Use Policy. Violations can result in network access restrictions or device bans, as well as additional staff or student disciplinary measures.
Basic tips for all users:
Emails - Avoid being 'phished' - these are emails meant to trick you into giving up your login username and password. No reputable company will send you an 'Urgent - you must change your password NOW' email - something like that should be immediately suspected.
Clicks and Downloads - Be careful of malware - especially when using a computer outside the MCS network. If you have a MCS device and suspect you may have a system infection, contact your school Media Specialist or Media/Tech and Inventory Assistant ASAP. More info on malware is available here.
Segmentation - Do not use your MCS email account for personal use. This not only avoids inappropriate use of MCS resources (in violation of MCS policy), it also reduces the chance of your MCS account being compromised, as external systems do get hacked.
Strong Passwords - Use good password policy - choose a complex password (at least 8 characters, upper-case and lower-case letters, and numbers at a bare minimum - special characters '@!=+$#*' are even better). Do not use the same password over multiple accounts.
Change Passwords - Change your password regularly - the NC IAM system has begin to enforce 90-day password expiration (more info and the schedule are available ). MCS will be implementing a similar policy before the end of the 2025/26 school year. You can change your MCS network and Google passwords with the MCS Password site here.
Vigilance - Monitor your account activity - If you suspect you have unauthorized use of your MCS Google account, or just want to check where it is being used, you can visit the Google Account Activity site here.
Report Security Concerns - If you receive a suspicious email, a 2FA prompt that you did not initiate, or wish to report another security concern, you may email '[email protected]'.