Enforcing a Passcode on a Device

Jamf School Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US
  1. In Jamf School, navigate to Profiles > Overview in the sidebar.
  2. Click + Create Profile.
  3. Select the operating system you want to make the profile for or select Upload custom profile.
  4. Select the type of enrollment you want to make the profile for.
  5. Enter a name in the Profile name field and configure the additional settings as needed, including the time filter.
  6. Click Finish.
  7. In the list of payloads on the left side of the pane, locate the General payload category and click the Passcode payload.
  8. Click Configure to configure basic settings, ensuring the Require passcode checkbox is selected.
    Important:

    (macOS devices only) When configuring a Passcode payload, Jamf recommends only entering a regular expression in the Custom regex field when absolutely necessary. When specifying a regular expression, it is possible that the regex you create will prevent users from being able to change their password on their device. You must also include a regex description and description language ID, or the regex will be ignored.

    Jamf recommends testing your custom regex before including it in a profile.

  9. (Supervised iOS and iPadOS devices only) In the list of payloads on the left side of the pane, locate the iOS payload category and click the Restrictions payload, then click Configure and deselect the Allow modifying passcode checkbox to prevent users from modifying the passcode.
    Note:

    If the Restrictions payload is configured or installed before the Passcode payload, the profile will fail to install. This is because the profile may require a passcode change, but the passcode cannot be modified due to the Restrictions payload.

  10. In the list of payloads on the left side of the pane, locate the General category and click the Scope payload.
  11. Configure the scope of the profile by clicking the + icon and adding device groups to the profile scope using the pop-up menu. For more information, see Device Groups.
  12. Click the Settings icon on the right side of the page, and do one of the following:

    • To install the profile on devices automatically, click Change to automatic installation for all groups.

    • To allow users to install the profile themselves, click Change to on-demand installation for all groups. The profile will be available for users to install in the Jamf Teacher or Jamf School Student apps.

  13. Click Save.

If you want the passcode to be the same on every device in the passcode profile's scope, you must manually enter the passcode on each device.