Disable the camera on work devices at a specific location (production, lab, datacenter).
Full camera off via MDM is easy but always-on. Location-based is harder, not native on iOS, on Android Enterprise via Mobile Threat Defense or a third-party kiosk app. For production/lab a wifi-based policy via a gateway app is usually the practical route.
Try this first
- 1Decide first: all day off (simple, MDM restriction) or geofenced (complex, often kiosk app).
- 2Intune iOS supervised: Restrictions > Allow camera = off, applies to the whole device.
- 3Android Enterprise Fully Managed: Restrictions > Disable camera = on, same scope.
- 4Geofenced: look at Microsoft Defender for Endpoint network policies or a specialist tool, manage expectations: this is not SMB plug-and-play.
When to bring us in
We assess if geofenced is really needed (compliance, customer requirement) or if 'always off on work iPhones' is enough, saves a lot of complexity.
See also
- Work and personal apps blur together on the same phoneAndroid Enterprise and iOS-with-Intune can enforce a work profile, isolating business apps in a separate container.
- Setting up Microsoft 365 on a new phoneOutlook, Teams, and OneDrive run smoothest if you install Authenticator first and sign the others in afterwards.
- Moving Authenticator to a new phoneMicrosoft Authenticator has built-in cloud backup. Run it before wiping the old device, otherwise everything has to be re-added by hand.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.