Disabling TouchID registration Prompt for new Network users

[VitorCostaUK]

Hi all , I'm trying to disable TouchID on Student machines , they are shared MBP with TouchID so I just want them to be logging in with their network credentials and not be prompted for Touch ID registration.

ive disabled it in Configuration profiles but every time a new user logs in they are still prompted for the opportunity to register their fingers .

any ideas ?

[sshort]

The most recent answer I've seen in the MacAdmins slack is that the profile is "fixed" and will properly skip that setup page in 10.15 Catalina. At my org it's pretty hit-or-miss as to whether that setting is respected with a profile at the moment when on Mojave.

Rich Trouton (who wrote this script) says that adjusting the user template to skip Touch ID is more consistently applied in Mojave and earlier.

[SGill]

Same trouble here with touchbar macs --tested the script in 10.14.6 and it's working well to bypass the fingerprint reg. It'll be great to have a fix to the profile method, though.

[VitorCostaUK]

did you use Rich trouton's script or just executed the package as a policy ?

[SGill]

I used the script. It appears it would have to run once per erase install since that usually clears any UT items. Even though the prefs exist in the Restrictions payload, they fail to disable that setup item like you said in 10.14 here too.