Description
The Prevent Changes to Accounts restriction in Jamf Now will cause the Apple Account option on iPhones and iPads to be greyed out. End users will be unable to add or remove an Apple Account.
We can either temporarily or permanently disable that restriction for devices if needed. Please note that this setting also impacts email settings, calendar settings, Messages and FaceTime settings.
Allowing End Users to Modify Apple Accounts
Temporarily Swapping Blueprints
This option makes it possible for multiple devices on the blueprint (but not all) to change the Apple Account.
In Jamf Now, go to Blueprints and open the blueprint to which the impacted devices are assigned.
Click the blueprint name at the top of the middle panel to open a drop down menu.
Click Copy. In the side pop-up menu set a blueprint name and click Save Blueprint in the lower-right corner.
Click Devices in the middle panel and assign the impacted devices to the copied blueprint.
Click Restrictions and click Security & Privacy.
Uncheck the box for Prevent changes to account.
Click Save Changes.
Once devices install the new blueprint, perform whatever changes are needed for the Apple Account.
Re-assign devices back to their original blueprint(s).
*Note the end users will have to re-sign into their email accounts if email is deployed from Jamf Now once the blueprint swap is complete.
Disabling the Restriction in the Current Blueprint
To make the change for all the devices on the blueprint, disable the restriction by following the steps below:
In Jamf Now, click Blueprints and select the blueprint that devices having this issue are assigned to.
Click Restrictions and click Security & Privacy.
Uncheck the box for Prevent changes to account.
Click Save Changes and sync devices to apply new blueprint configuration.
The Apple Account pane should no longer be greyed out and you can make whatever changes needed on the devices.
If desired, re-enable Prevent changes to account on the blueprint when ready.