Lightspeed MDM - Enforce PIN on iOS

[snagrat]

We need to enforce the requirement to use a passcode on currently deployed iPads managed by Lightspeed MDM.

 

I can see setting to configure a passcode policy but unsure if this actually enforces it?

 

Also does anyone know what happens if I do enforce it, will they get prompted to create a passcode themselves?

[bknaggs]

Once the policy kicks in the users have 60 minutes to choose a passcode. Once the 60 minutes is up the passcode message can't be dismissed and the only option is to set a passcode.

[snagrat]

Thats great.

 

Although not sure how I actually enforce the policy in Lightspeed now. I've set one config so hopefully that is all that is all that is need to force it on.

[Brimstone]

Here....

 

https://help.lightspeedsystems.com/s/article/policies-policy-management?language=en_US

[talksr]

Quick question…If you enforce the policy and the user forgets the passcode - which is highly likely in my work environment, is there a way this can be reset from Lightspeed or would the entire device need to be wiped and set up again?

[bknaggs]

As long as the device doesn't get restarted the passcode can be removed by the MDM. If the device gets restarted it won't connect to wifi before the passcode is entered so you'll probably end up having to reset the device.

[Face-Man]

The only thing to note is if the ipads are not on wifi they can't reconnect until the passcode is entered so if the teacher forgets and the dhcp lease expires then no mdm can then tell the ipad that it needs to clear the passcode. I've had to wipe lots of ipads manually when teacher forget the passcode ...

[talksr]

Thank you both. Hmmm, I wonder what would happen if you connected a USB ethernet adapter to the charge port. My iPad happily uses wired ethernet when I plug it in. But I am assuming after a reboot, it will not connect to anything until the passcode has been entered.

[bknaggs]

One of three things I think.

It'll work

You'll get a warning about needing to unlock the device to allow USB devices

You'll get a warning about the USB device drawing too much power.

[JMSJ]

I've used internet sharing from a Mac before to get it connected after a restart. However there is a restriction called USB restricted mode and i can't fully remember if that needs to be enabled or disabled for it to work. Best bet is to test it on a spare device or a device you know the password of.

[talksr]

I've used internet sharing from a Mac before to get it connected after a restart. However there is a restriction called USB restricted mode and i can't fully remember if that needs to be enabled or disabled for it to work. Best bet is to test it on a spare device or a device you know the password of.

 

Thank you, will give that a try