Category filter

Configuration profile to disable Touch ID settings on Mac

This article explains how IT administrators can disable touch ID on Mac using a configuration profile.

Unlocking and verifying user identity on Mac is made easy with Touch ID, which utilizes fingerprints for authentication. While this feature offers convenience, there may be situations where IT administrators need to restrict access to Touch ID settings. For example, in a shared device environment, multiple users may have access to the same Mac. In such cases, disabling Touch ID preferences can prevent individuals from adding or removing fingerprints on the device. Here’s a configuration profile that will help you achieve it. With Hexnode’s Deploy Custom Configuration feature, IT admins can deploy the configuration profile to disable Touch ID preferences on Mac.

Disclaimer:


The configuration profile provided below is adapted from a third-party open-source site.

Note:


This configuration profile is supported on devices running macOS 12.7.3 (or later) with the Apple Silicon chip.

Disable Touch ID on Mac with a custom profile

The above configuration profile restricts the user from accessing the Touch ID settings in System Settings/Preferences on the Mac. This means that the user will not be able to configure Touch ID or change any related settings. However, if the user has already configured Touch ID on the device, they will still be able to use it for authentication purposes.

Re-enable Touch ID on Mac

After you disable touch ID with a custom profile, you can deploy the above configuration profile to re-enable it.

What happens at the device end?

After associating the configuration profile to disable Touch ID, the Touch ID & Password settings will be disabled on the device. For macOS devices version 13 and later with a silicon chip, the option will be disabled in System Settings.
Touch ID & Password settings are disabled by a profile

For macOS devices running version 12.7.3 with a silicon chip, the option will be disabled in System Preferences.

Disable Touch ID settings on Mac using a configuration profile

After associating the configuration profile to re-enable Touch ID settings users can modify Touch ID settings on Mac.

Touch ID settings enabled by a configuration profile

If the System Preferences/Settings is kept open on the device when the configuration profile policy is associated, you may have to exit and open the System Preferences/Settings again for the configuration profile policy to take effect.

Notes:

  • To create and customize configuration profiles, you can use tools like Apple Configurator, Profile Manager or manually create them using text editors.
  • Use non-encrypted .mobileconfig, .xml, or plist files to deploy profiles across macOS devices.
  • Ensure that you do not associate conflicting configurations with the devices.
  • It is recommended to manually validate the configuration profile execution on a system before executing the action in bulk.
  • Hexnode will not be responsible for any damage/loss to the system on the behavior of the configuration profile.

  • Configuration Profile Repository