University IT
VLRE Policy for the School of Medicine
As of July 31, 2026, all VLRE users with a School of Medicine (SoM) affiliation must enroll/register a device in Microsoft Intune and authenticate through Microsoft Entra ID to access SoM/Stanford Health Care (SHC) resources in the Microsoft environment, including email and OneDrive, to meet HIPAA requirements and Stanford Administrative Guide 1.6.2 expectations.
As a prerequisite to Intune, Apple devices must be enrolled in Jamf and Windows devices must have BigFix installed. Users should run the Stanford Device Registration app before registering with Entra ID or enrolling/registering a device with Intune.
This applies to institution- and personally-owned devices, remote and local access, and all user roles including contractors and affiliates. Non-compliant devices or accounts will be denied access until brought into compliance.
If a legitimate operational or technical need prevents compliance, the exemption request should be routed to the Stanford Medicine Technology and Digital Solutions (TDS) team for review.
Acceptable reasons for exemption are limited to non-personal, non-privacy-based issues such as validated technical incompatibility, a legacy device or application that cannot support enrollment, or a short-term transition period while remediation is completed.
TDS will determine whether compensating controls and a time-limited exception are appropriate. Until an exception is approved, users and devices must remain compliant to retain access to university and hospital resources.
