How to restrict end users from signing into iCloud? iOS devices Intune Activation Lock.

Question

I am reviewing our provisioning on our iOS devices. We need to restrict the ability for users to login to their iCloud. Some users will leave the company and have their iCloud on the device that prevents us from resetting the device because of the activation lock. Can I either remove the ability to use personal iCloud account OR disable the ability for them to turn on the Activation Lock associated with their personal Apple ID?

Answer 1

@Dani Cabrera, Thanks for posting in Q&A.

For Activation Lock, it is not suitable. Because when the user sets up Activation Lock on a device. The user then leaves the company and returns the device. Without the user's Apple ID and password, there's no way to reactivate the device.

https://learn.microsoft.com/en-us/mem/intune/remote-actions/device-activation-lock-disable

After researching, there's a setting under Device Restriction policy may help. Device Restrictions > General > Block modification of account settings, it appears to grey out the option and not allow the user to enter an iCloud account.

https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-ios#settings-apply-to-automated-device-enrollment-supervised-6

Hope the above information can help.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.