Key Takeaways
- This policy improves device security by blocking Siri usage when the device is locked.
- Prevents Siri from responding to voice commands on the lock screen.
- Can be centrally managed and enforced using Microsoft Intune.
- Reduces the risk of unauthorized access to device information.
Hey, let’s discuss about How to Disable Siri When the Device Is Locked on iOS Using Intune. This policy controls whether Siri can be used when an iOS device is locked. If the policy is set to false, Siri will not work on the lock screen. This helps stop anyone from using voice commands without unlocking the device.
When Siri is disabled while the device is locked, users must unlock the iPhone or iPad to use Siri. This protects personal data like messages, contacts, and calendar details from being accessed by others.
This restriction only works if the device has a passcode set. If there is no passcode on the device, the policy is ignored, and Siri may still work on the lock screen. So, setting a strong passcode is very important.
The policy is supported on devices running iOS 5.1 and later. This means it works on almost all modern iPhones and iPads used in organizations today. This setting is also available for user enrollment devices. It helps organizations improve security while still allowing users to manage their personal devices safely under company rules.
Table of Contents
How to Disable Siri When the Device Is Locked on iOS using Intune
Before enabling this policy, Siri can be used while the device is locked, which means anyone nearby could ask Siri to make calls, read messages, or access information without unlocking the device. After enabling the policy, Siri is blocked when the device is locked, and users must unlock the iPhone or iPad to use Siri, which greatly improves security and prevents unauthorized access to personal or company data.
- Simple Way to Add iOS to Apple Business Manager and Manage in Intune Part 3
- Easy method to Manage Multiple Profiles in Outlook for Mac
- Secure iOS Devices by Blocking Call Initiation using Intune
How this Helps Supervised Devices
This policy helps supervised devices by preventing Siri from working when the device is locked, which stops unauthorized users from accessing company information through voice commands. Since supervised devices are fully managed by the organization, the setting is strictly enforced and cannot be bypassed by users. This reduces the risk of data exposure if the device is lost or stolen and improves overall security for corporate-owned iOS devices.
Create a Profile
First sign in to the Microsoft Intune admin center. Go to Devices and select Configuration profiles. Then click Create profile to open the profile creation window. Select platform and profile type. After that, click Create to begin configuring your new policy.
| Steps | Details |
|---|---|
| Platform | iOS/iPadOS |
| Profile Type | Settings Catalog |
First Step
To begin configuring a policy in Intune, start with the Basics step. Here, we can add the name of the policy and give a brief description.
- Name of the Policy: Allow Assistant
- Description: To Allow Assistant While Locked
- Platform: iOS/iPadOS
Configuration Settings
In the Configuration settings tab, click the Add settings button to open the Settings picker. Type Assistant while locked or search the category Restrictions in the Search bar. Then Select the Allow Assistant while locked.
Once you have selected this policy and closed the Settings picker. You will see it on the Configuration page. Here we have only two settings True or False. By default, it will be set to True(Enable). If you want to allow these settings, click on the Next button.
Disable Assistant While Locked Policy
If we blocked or not configure this policy, you can disable the assistant while locked policy by toggling the switch from right to left. Then you can click the Next button to proceed.
Scope Tag
In Intune, Scope Tags are used to control who can view and modify a policy. The scope tag is not mandatory, so you can skip this section. It functions as a tool for organisation and access management, but assigning it is optional. Click Next if they’re not required for your setup.
Assignments
In the Assignments tab, you choose the users or devices that will receive the policy by clicking Add Group under Include Group, select the group that you want to target (e.g HTMD Supervised Devices – iOS/iPadOs) and then click Next to continue.
Last Step
At the final Review + Create step, we see a summary of all configured settings for the new profile; after reviewing the details and making any necessary changes by clicking Previous. We click Create to finish, and a notification confirms that the “Allow Assistant created successfully”.
Monitoring Status
To view a policy’s status, go to Devices > Configuration in the Intune portal, select the policy (Allow Assistant), and check that the status shows Succeeded (1). Use manual sync in the Company Portal to speed up the process.
How to Check on End User Device
To check this on an end user iOS device, lock the iPhone or iPad and try to activate Siri by saying Hey Siri or by pressing and holding the Side/Home button. If the policy is applied, Siri will not respond until the device is unlocked with a passcode, Face ID, or Touch ID. You can also go to Settings > Siri & Search and confirm that Siri options are restricted on the lock screen.
Remove Assigned Group from this Policy
After creating the policy, if you want to remove the specific group that you previously selected, you can easily do that. First, go to Devices > Configuration policies. In the Configuration policy section, search and select the policy. In the Assignment section, you will find an Edit option and click on it. Then, click the Remove option.
For detailed information, you can refer to our previous post – Learn How to Delete or Remove App Assignment from Intune using by Step-by-Step Guide.
Delete this Policy from Intune Portal
If you want to delete this policy for any reason, you can easily do so. First, search for the policy name (Allow Assistant)in the configuration section. When you find the policy name, you will see a 3-dot menu next to it. Click on the 3 dots, then click the Delete button.
For detailed information, you can refer to our previous post – How to Delete Allow Clipboard History Policy in Intune Step by Step Guide.
Need Further Assistance or Have Technical Questions?
Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.
Author
Anoop C Nair has been Microsoft MVP from 2015 onwards for 10 consecutive years! He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is also a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc