We have set up few ipads in our school environment for common use. The issue is that some students are setting up device passcodes as a joke, and the device becomes unusable for others who wants to use it. We’re able to clear the passcodes from the portal but is there a way to prevent these students from setting it again?
Prevent students from setting a passcodeSolved
950 Views
Replies (3)
Marked SolutionPending Review
Hexnode Expert
3 years ago
Marked SolutionPending Review
Thank you for reaching out to us, @abbi.
Yes, you can easily restrict the students from setting a device passcode from the Hexnode portal. To enable this restriction, navigate to Policies > iOS > Advanced Restrictions > Allow Security and Privacy Settings, uncheck the option Modify passcode and associate it with the required devices. This will block the students from adding, changing or removing the passcode on the iPads.
This feature is only applicable to supervised iOS devices running 9.0+ and iPadOS devices running 13.1 and later.
Hope this helps. Do reach out to us for any further queries.
Cheers!
Chris Wheeler
Hexnode UEM
Marked SolutionPending Review
Participant
3 years ago
Marked SolutionPending Review
Noted on this. We’re also planning to roll out fresh ipads for the senior high school students pretty soon. What’s the best practice to set this up? Is there a way to prevent the passcode prompt from showing up when the devices are turned on initially in the first place?
Marked SolutionPending Review
Hexnode Expert
3 years ago
Marked SolutionPending Review
Yes! It is possible to prevent the passcode prompt from showing up in the Setup Assistant pane when an iOS/iPadOS device starts up for the first time. To achieve this, you’d need to enroll the device using any of the below enrollment methods:
For the cases of Apple Configurator Enrollment and ABM/ASM Enrollment via Apple Configurator, the Passcode option can be unchecked in the iOS Setup Assistant step while preparing the device in Apple Configurator. In the case of ABM/ASM Enrollment, you can associate a DEP configuration profile with the Passcode option unchecked.
If you enroll your iPads via ABM/ASM enrollment or ABM/ASM Enrollment via Apple Configurator, you can add the devices as pre-approved while configuring the DEP account. You can then create a dynamic device group with the pre-approved devices (choose condition filters: Device info > Enrollment status > Is > Pre-approved) and then associate a policy with the Modify passcode restriction enabled. That way, the policy will automatically take effect when the students start up their devices initially.
As for Apple Configurator Enrollment, you can set up the Modify passcode restriction while creating a configuration profile in Apple Configurator. Or, you can configure and associate a policy (as mentioned above) from the Hexnode portal after the enrollment process before handing out the iPads to the students.
Hope this helps.
Have a great day!
Chris Wheeler
Hexnode UEM
Save
