To control Fingerprint (Touch ID) or Face ID modification on iOS devices managed through WeGuard MDM, you must configure the appropriate restriction settings within the device policy.

By default, many security-focused MDM configurations restrict biometric modifications to prevent unauthorized users from adding or removing Face ID, Touch ID, or passcode settings.

Disabling Allow Removing Apps

---

• Log in to the WeGuard Console.

• Navigate to Policies and select the required iOS DEP policy.
  

• In Restrictions, find the ‘Touch ID / Face ID Modification’ option.
  
  

• Toggle OFF the option to disable Touch ID / Face ID Modification
  

• Then click Save, review changes, and select Confirm and Save.
  

After the policy syncs to the device, users will not be able to add, remove, or modify Face ID, Touch ID, or passcode settings.