Block Touch ID ?

Read these Apple Knowledge Base articles. Also, you can disable Touch ID in Settings>Touch ID

Use Touch ID on iPhone and iPad - Apple Support

About Touch ID security on iPhone and iPad - Apple Support

Product security certifications, validations, and guidance for iOS - Apple Support

Would it work for you to set a passcode, not set a fingerprint and set the Require passcode interval to as long as possible? If the iPads are generally plugged in, you could also set them so that they never Autolock.

Have you looked at any of the business deployment solutions for iOS devices? They are frequently mentioned in this forum.

You should really read up on using the Apple Configurator.

It comes with countless possibilities and solutions.

I could write examples here but it is best if you read it yourself!

😁

I haven't looked into your question about passcodes, but here is some info about mdms.

"This document offers guidance on some important considerations for getting the most out of your iOS deployment." Covers: Prepare your infrastructure. Set up devices. Configure and manage devices. Deploy apps and content. Plan for support.

https://www.apple.com/business/docs/iOS_Enterprise_Deployment_Overview.pdf

Quick overview of zero touch deplayment

http://www.apple.com/education/it/dep/

Consider DEP, Device Enrollment Program. Use VPP, Volume Purchase Program. Select an MDM, Mobile Device Management. Read the Google doc below and nsdjoey write up.

Overview of ipad & iphone deployment.

It's education focused.

http://www.apple.com/education/it/

Writing you own app for your business:

https://developer.apple.com/enterprise/

MDM -- Mobile Device Management

https://developer.apple.com/videos/play/wwdc2015-301/

For a comparison see this page:

http://www.enterpriseios.com/wiki/Comparison_MDM_Providers

VPP -- Volume Purchase Program

http://www.apple.com/business/vpp/

http://www.apple.com/education/it/vpp/

Using Apple Configurator 2

See ccsdtech writeup on page 5

See weinsteinbevit plus Meraki MDM on page 5

https://discussions.apple.com/thread/7302890?answerId=29798579022#29798579022&tstart=0#29798579

MDM -- Mobile Device Management

MDMs

Airwatch, Meraki, MobileIron, Profile Manager on OS X Server, or Zenprise

For a comparison see this page:

http://www.enterpriseios.com/wiki/Comparison_MDM_Providers

Airwatch

http://www.air-watch.com/

Apple Configurator and Apple Profile Manager

"Apple Configurator makes it easy for anyone to mass configure and deploy iPhone, iPad, and iPod touch in a school, business, or institution." Limited to Macs. Connects via USB cable.
http://itunes.apple.com/us/app/apple-configurator/id434433123?mt=12

"Profile Manager lets you configure OS X and iOS devices so they�re set up to use your company or school resources and have the settings, apps, and books your organization requires. Profile Manager creates settings and preference bundles for devices and deploys them to devices via the Mobile Device Management (MDM) service." Requires OS X server.
http://www.apple.com/uk/support/osxserver/profilemanager/

GroundControl is an alternative to Apple Configurator. "Enterprise-scale iOS provisioning, update, supervision, intelligent policies...all in the cloud."

https://www.groundctl.com/

Meraki -- A free MDM [ expect lots of email and phone calls about upgrades ]

Read the product overview. Click on "get started now" to sign up.

https://meraki.cisco.com/products/systems-manager/?ref=YZRzCR

Video's on how to setup and use Meraki.

https://meraki.cisco.com/blog/2012/08/how-to-get-the-most-from-meraki-systems-ma nager/

MobileIron

http://www.mobileiron.com/

Zenprise

http://www.zenprise.com/

If you supervise the devices with Apple Configurator, there is an option for "allow modify passcode" and "allow modify touchID". You could lock both of these settings.