Description
If the Jamf Now restriction 'Prevent changes to passcode" is enabled, this can remove Face ID & Passcode or Touch ID & Passcode from showing in the Settings app.
Temporarily Granting Access to Set a Passcode
Using a Blueprint Swap
To access passcode settings on a a few devices on the blueprint, temporarily swap blueprints* following the steps below:
In Jamf Now, go to Blueprints and open the blueprint to which the impacted devices are assigned.
Click the blueprint name at the top of the middle panel to open a drop down menu.
Click Copy. In the side pop-up menu set a blueprint name and click Save Blueprint in the lower-right corner.
Click Devices in the middle panel and assign the impacted devices to the copied blueprint.
Click Restrictions and under the Security & Privacy section, uncheck Prevent changes to passcode.
Click Save Changes.
Once devices install the new blueprint, perform whatever changes are needed in Face ID & Passcode or Touch ID & Passcode.
Re-assign devices back to their original blueprint(s).
*Note - If email accounts are deployed from Jamf Now, the end users will have to re-authenticate to their email accounts after the blueprint swap is complete.
Disabling for All Devices
To access the passcode settings for all the devices on the blueprint, disable the restriction by following the steps below:
In Jamf Now, click Blueprints and select the blueprint that devices having this issue are assigned to.
Click Restrictions and under the Security & Privacy section, uncheck Prevent changes to passcode.
Click Save Changes and sync device to apply new blueprint configuration.
Passcode settings should now be visible on device for the user to set a passcode.
If desired, re-enable Prevent changes to passcode on the blueprint once it is no longer necessary to make changes in Face ID & Passcode or Touch ID & Passcode on the devices.