Description
If your blueprint has the Prevent Changes to Passcode setting enabled under Restrictions, this will make the end user unable to set, change, or remove the passcode.
To remove a passcode from a device you can either send the unlock command from Jamf Now or disable the restriction and manually change the passcode on the device.
Sending the Unlock Command from Jamf Now
To send the unlock command:
In Jamf Now, click Devices.
Select the device we want to remove the passcode for.
Click the ... button in the upper-right corner.
Click Unlock device.
Once the device checks in with Jamf Now it should receive the command to remove the passcode.
Note: A new passcode will not be able to be set until the restriction is removed from the device.
Removing the Blueprint Restriction
Using a Blueprint Swap for a few Devices
To manually change the passcode on a few devices on a blueprint, temporarily swap blueprints* following the steps below:
In Jamf Now, go to Blueprints and open the blueprint to which the impacted devices are assigned.
Click the blueprint name at the top of the middle panel to open a drop down menu.
Click Copy. In the side pop-up menu set a blueprint name and click Save Blueprint in the lower-right corner.
Click Devices in the middle panel and assign the impacted devices to the copied blueprint.
Click Restrictions and under the Security & Privacy section, uncheck Prevent changes to passcode.
Click Save Changes.
Once devices install the new blueprint, perform whatever changes are needed in Face ID & Passcode or Touch ID & Passcode.
Re-assign devices back to their original blueprint(s).
*Note: If email accounts are deployed from Jamf Now, the end users will have to re-authenticate to their email accounts after the blueprint swap is complete.
Removing the Restriction for the entire Blueprint
To change the passcode settings for all the devices on the blueprint, disable the restriction by following the steps below:
In Jamf Now, click Blueprints and select the blueprint that devices having this issue are assigned to.
Click Restrictions and under the Security & Privacy section, uncheck Prevent changes to passcode.
Click Save Changes and sync device to apply new blueprint configuration.
Passcode settings should now be visible on device for the user to set a passcode.
If desired, re-enable Prevent changes to passcode on the blueprint once it is no longer necessary to make changes in Face ID & Passcode or Touch ID & Passcode on the devices.