Key Takeaways
- The policy helps prevent photos and videos on managed devices.
- It applies only to supervised iOS devices.
- When enabled, the camera is fully blocked.
- When disabled, the camera works normally again.
Hey, let’s discuss about How to Restrict Camera Access on Supervised iOS Devices using Intune. This policy is used to disable the camera on iOS devices that are managed and supervised through Microsoft Intune. When enabled, users cannot open or use the camera app on their iPhone or iPad. This helps organizations control how devices are used at work.
Disabling the camera is important in places where taking photos or videos is not allowed. For example, offices that handle confidential data, research labs, exam centers, or manufacturing floors may want to block camera usage. This policy helps prevent accidental or intentional data leaks.
Once this policy is applied, the camera app disappears or becomes unusable on the device. Apps that rely on the camera, such as scanning or video apps, will also stop working. This ensures complete control over camera access.
This policy works only on supervised iOS devices, which means the device is fully managed by the organization. Supervision allows IT administrators to enforce stronger security rules that normal personal devices cannot support.
Table of Contents
How to Restrict Camera Access on Supervised iOS Devices using Intune
Using this policy through Intune makes device management simple and centralized. Administrators can enable or disable the camera remotely without touching the device. This saves time, improves security, and ensures company policies are followed consistently.
- New Advanced Camera Options in Windows Multi App and Basic Camera Features
- Enable Disable Camera Settings using Intune and Microsoft Graph API
- Android Phone or Tablet Camera in any Video Application on Windows 11 PC
How this Helps Supervised Device
On supervised devices, this policy helps by giving full control to the organization. When the camera is disabled, users cannot turn it back on or find a way around it. This keeps company data safe because no photos or videos can be taken. It also makes sure all supervised devices follow the same security rules without relying on the user to do anything.
Create a Profile
First sign in to the Microsoft Intune admin center. Go to Devices and select Configuration profiles. Then click Create profile to open the profile creation window. Select Platform and Profile type. After that, click Create to begin configuring your new policy.
| Platform | Profile type |
|---|---|
| iOS/iPadOS | Settings Catalog |
Basic Step
To begin configuring a policy in Intune, start with the Basics step. Here, we can add the name of the policy and give a brief description. Then click Next to continue.
- Name of the Policy: Allow Camera
- Description: To Allow Camera
- Platform: iOS/iPadOS
Configuration Settings
In the Configuration settings tab, click the Add settings button to open the Settings picker.Type Allow Camera or search the category Restrictions in the Search bar. Then Select the Allow Camera setting.
Once you have selected this and closed the Settings picker. You will see it on the Configuration page. Here we have only two settings True or False. By default, it will be set to True. If you want to allow these settings, click on the Next button.
Block Camera
If we Not allowed or don’t configure this policy, you can block the camera policy by toggling the switch from right to left. Then you can click the Next button to proceed.
Scope Tag
In intune, Scope Tags are used to control who can view and modify a policy. The scope tag is not mandatory, so you can skip this section. It functions as a tool for organisation and access management, but assigning it is optional. Click Next if they’re not required for your setup.
Assignments
In the Assignments tab, you choose the users or devices that will receive the policy by clicking Add Group under Include Group, select the group that you want to target (e.g HTMD Supervised Devices – iOS/iPadOs) and then click Next to continue.
Review + Create
At the final Review + Create step, we see a summary of all configured settings for the new profile; after reviewing the details and making any necessary changes by clicking Previous. We click Create to finish, and a notification confirms that the “allow Camera created successfully”.
Monitoring Status
To view a policy’s status, go to Devices > Configuration in the Intune portal, select the policy (like Allow Camera), and check that the status shows Succeeded (1).
How to Check on End User Device
To check this on the end user’s device, it is very easy. First, look for the Camera app if you cannot find it or it does not open, the policy is working. Next, open any app that normally uses the camera; if the camera does not turn on, it means the camera is blocked. This shows that the device is managed and the camera restriction is applied.
How to Remove Assigned Group from this Policy
After creating the policy, if you want to remove the specific group that you previously selected, you can easily do that. First, go to Devices > Configuration policies. In the Configuration policy section, search and select the policy. In the Assignment section, you will find an Edit option and click on it. Then, click the Remove option.
For detailed information, you can refer to our previous post – Learn How to Delete or Remove App Assignment from Intune using by Step-by-Step Guide.
How to Delete this Policy from Intune Portal
If you want to delete this policy for any reason, you can easily do so. First, search for the policy name in the configuration section. When you find the policy name, you will see a 3-dot menu next to it. Click on the 3 dots, then click the Delete button.
For detailed information, you can refer to our previous post – How to Delete Allow Clipboard History Policy in Intune Step by Step Guide.
Need Further Assistance or Have Technical Questions?
Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community to get the latest news on Microsoft Technologies. We are there on Reddit as well.
Author
Anoop C Nair has been Microsoft MVP from 2015 onwards for 10 consecutive years! He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is also a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security, Career, etc