What's new 
Is there a way to prevent users from using Face ID on managed iPhones through Hexnode? I found the iOS restriction for Touch ID in the policy, but I’m not sure how it affects Face ID. If I disable that restriction, will it stop users from unlocking the phone with Face ID even if they already set it up? Also, can Face ID be blocked completely across the device?
8 Views
Replies (1)
Marked SolutionPending Review
Hexnode Expert
4 days ago
Sep 18, 2026
Marked SolutionPending Review
Yes @hugo_l . You can prevent users from managing Face ID on managed iPhones through Hexnode.
However, Touch ID is not the option to use. To manage Face ID, use the Add or remove Touch ID / Face ID restriction.
To prevent Face ID from being used to unlock managed iPhones:
- Go to the iOS policy.
- Open iOS > Restrictions > Advanced Restrictions.
- Disable Add or remove Touch ID / Face ID.
- Save and associate the policy with the required devices or users.
Once the policy is applied, users will not be able to add, remove, or change Face ID on supported supervised iPhones. However, if Face ID was already configured, this restriction does not disable the existing Face ID or prevent users from using it to unlock the device.
Hexnode does not provide a separate iOS restriction to completely disable an already-configured Face ID across the device. The available restriction controls the enrollment and modification of Face ID, rather than disabling its use for device unlocking or other authentication scenarios.
Regards,
Isabel Lora
Hexnode UEM
Save