Require passcode before removing restrictions

[SteveS]

On iOS devices. We are using Jamf Setup with Entra for SSO and shared device iphones and ipads.

One challenge I am having is that once a user logs in, they may choose to ignore the passcode requirement prompt over and over.

My idea is to scope my restrictions to remain in place till the user sets a passcode. I have a smartgroup with a configuration of Passcode status present. Then set this group for exclusion.

The challenge I am having though is that this group doesnt seem to update.  Is there a better approach i should be taking?

[jsommers]

You should create a smart group based on the Passcode Status criterion. That would allow you to sort these devices depending on whether there is a password present or not. From there, apply your restrictions to the password not present smart group.

[SteveS]

The status for passcode present doesn’t update until there is an inventory update. Is there a way to make it update immediately?

[jsommers]

Unfortunately, In Jamf, mobile devices can only update inventory once a day.