Description
This article provides steps on how to prevent users from logging in or out of an Apple Account/iCloud accounts on mobile devices. In Jamf Now we can:
Remove the Apple Account step from the Setup Assistant.
Use the Prevent Changes to Accounts restriction in Jamf Now to restrict access to modifying the Apple Account pane.
Skipping Apple Account in Setup Assistant
We can keep users from entering an Apple Account in the Setup Assistant by removing the Apple Account screen using the steps below:
In Jamf Now, go to Auto-Enrollment > Setup Steps.
Under Services, select the box for Apple Account.
Click Save Settings.
Enabling Prevent Changes to Accounts
Use the Prevent Changes to Account restriction in the blueprint to lock down the Apple Account pane in the Settings app following the steps below.
Log into Jamf Now and click Blueprints.
Select the desired blueprint.
Click Restrictions.
Expand the Security & Privacy section.
Check Prevent Changes to Accounts.
Click Save Changes at the bottom of the page.
Enabling this restriction will:
grey out the Apple Account menu in the Settings app so no changes can be made.
prevent users from logging out if they have already logged in to an Apple Account.
prevent users from being able to change email accounts manually.