topic Re: Force iOS location Services in Endpoint Security

Force iOS location Services

nnatale — Fri, 03 Nov 2017 14:46:09 GMT

I am looking for a way to prevent location services from being turned off on our ipads and iphones. The app pops up letting the end user know that location services are on and allows the end use to disable.

Re: Force iOS location Services

benspringael — Fri, 03 Nov 2017 15:13:05 GMT

Hi Nic

Don't think it's possible

Article: https://documentation.meraki.com/SM/Monitoring_and_Reporting/Managing_Systems_Manager_Location_Services_for_iOS

You cannot configure Privacy > Location Services via MDM. This means that end users have the ability to turn on or off GPS tracking.

Cheers,

Ben

Re: Force iOS location Services

JoshH1 — Wed, 04 Apr 2018 14:55:36 GMT

We have got round this using restrictions on the device under settings > general > restrictions and then disallowing the change to location settings. - only downside is that it has to be configured on the device - we do it before rollout.

Re: Force iOS location Services

vassallon — Thu, 05 Apr 2018 17:10:13 GMT

I have asked Apple to add this functionality as I believe they will have to develop code to all MDM vendors to enforce this restriction. At this time there isn't even a way to develop a restriction through Apple Configurator 2 or any other restriction payload method.

Re: Force iOS location Services

nnatale — Fri, 06 Apr 2018 15:48:29 GMT

Thanks

Re: Force iOS location Services

wharrison1 — Wed, 11 Apr 2018 10:07:05 GMT

We've found that disabling the supervised restriction "Allow modifying Find My Friends settings" greys out the Location Services switch so the end-user cannot change it.

Re: Force iOS location Services

nnatale — Wed, 11 Apr 2018 12:20:31 GMT

thanks!

Re: Force iOS location Services

wharrison1 — Wed, 11 Apr 2018 14:38:39 GMT

Be aware though that the end-user can still go in and change the location access for each app.

But the overall location services switch is set to permanently on.

Re: Force iOS location Services

Melissa4 — Thu, 12 Apr 2018 19:25:50 GMT

Location services can be disabled by the user - this is an apple restriction/requirement for the time being.

The work arounds described in this thread are definitely an option!

Another feature to be aware of is Lost Mode (for supervised devices) - which will "wake" location services, even if the user has disabled them. It wont lock location services on once Lost mode is disabled, which sounds like what you're looking for. Thought I'd mention it anyway 🙂

https://documentation.meraki.com/SM/Monitoring_and_Reporting/Using_Lost_Mode_to_Recover_Missing_iOS_Devices

Re: Force iOS location Services

MarkSchilling — Tue, 08 Jan 2019 20:55:27 GMT

What if the device in question currently has location services turned off? Will locking the setting automatically turn location services on as well as permanently locking that option down, or will it leave the location services permanently off?

Re: Force iOS location Services

wharrison1 — Wed, 09 Jan 2019 08:32:52 GMT

If I remember correctly, it allows the end user to turn it on, and only then greys out the switch so it cannot be turned off.

Re: Force iOS location Services

aCancino — Mon, 07 Oct 2019 21:09:36 GMT

I know this is an old post but I wanted to provide an update to this. As of today, it appears that disabling the supervised restriction "Allow modifying Find My Friends settings" no longer greys out the Location Services switch for devices running on 13.1.2.

iOS devices on 12.3.1, or older, will continue to have the Location Services switch greyed out. Hopefully another work-around can be found in the near future!

Re: Force iOS location Services

vassallon — Mon, 07 Oct 2019 21:14:05 GMT

@aCancino That makes sense as there are two new restrictions that control the Find My App.

Allow Find My Device in the Find My app.

Allow Find My Friends in the Find My app.

Re: Force iOS location Services

wharrison1 — Tue, 08 Oct 2019 08:25:03 GMT

Well spotted.

So now we have to decide if it matters or not.

What scenarios can we imagine where we would want to access the location of an iOS device (via SM) without having to put the device into Lost Mode...?