IBM MaaS360

 View Only
Expand all | Collapse all

Location Services iOS

  • 1.  Location Services iOS

    Posted Tue August 21, 2018 01:18 PM
    Is there a way to enforce location services always on with a policy or rule?

    ------------------------------
    Rebecca Marshall
    ------------------------------


  • 2.  RE: Location Services iOS

    Posted Wed August 22, 2018 03:30 AM
    Hi Rebecca, 

    I had the same issue and requested a RFE here: https://www.ibm.com/developerworks/rfe

    IBM advised me that it cannot be done due to apple not providing a way for MaaS360 to control this portion of the device like on Samsungs.

    They advised if it does become available, they will implement.

    Thanks

    ------------------------------
    Jack Hayden
    ------------------------------

    Original Message


  • 3.  RE: Location Services iOS

    Posted Wed August 22, 2018 09:40 AM
    Much like other controls on iOS devices, they can be set to no or off, but the end user can still turn them back on/off.  I have a group of iPads that are WiFi only and they can still turn off the location services.  The setting to prevent users from modifying cellular use is only for controlling which apps can use cellular data. 

     The only recourse you have would be to set up a Compliance rule that will notify the user, their manager and yourself or whatever variation you like, that the location services on the device have been turned off.  Apple has not yet provided  a way for their devices to have location services set to always on.

    ------------------------------
    Dana

    ------------------------------

    Original Message


  • 4.  RE: Location Services iOS

    Posted Wed August 22, 2018 04:13 AM
    Edited by Michalis Petropoulos Wed August 22, 2018 04:14 AM
    Hi Rebecca,

    On a location enabled device, restricting the cellular data modification, i suppose will result always on location services.

    In the iOS policy -> Supervised Settings -> Restrictions and Networks -> Allow Cellular Data Usage Modification (disable).

    ------------------------------
    Michalis Petropoulos
    ------------------------------

    Original Message


  • 5.  RE: Location Services iOS

    Posted Thu August 23, 2018 08:01 AM

    My understanding with location services in general, is that the concept of "these are consumer devices, first" comes into play. 

    Apple has always positioned their mobile devices as consumer devices and then found ways to encourage adoption into the business world.  This evolution has been significant however Apple continues to be wary of anything that could infringe personal privacy. 

    As such they never provided any api's or other level functionality to any MDM vendor to prevent a user from disabling location services on their device.

    Further, location accuracy is never guaranteed by any MDM vendor.  Relying on GPS, Cell Tower triangulation and WIFI co-ordinates requires a constant strong device connection to a wireless network or WIFI network.  This throws a huge variable into the equation obviously. 

    I always advise customers that location information provided in an MDM solution is convenient and provides some level of historical tracking but should never be relied on for more serious location needs.



    ------------------------------
    Mitch Lauer
    ConnecTel Wireless
    www.connectelwireless.com
    mlauer@connectelwireless.com
    ------------------------------

    Original Message


  • 6.  RE: Location Services iOS

    Posted Wed June 03, 2020 04:00 PM
    has there been any updates on this front? I have a few apps that require location services to be set to always allow and it would be immensely helpful to preform this action remotely.

    ------------------------------
    Tony Tabor
    ------------------------------

    Original Message


  • 7.  RE: Location Services iOS

    Posted Thu August 18, 2022 11:04 AM
    Did you ever get an answer to this issue? Having the same problem.

    ------------------------------
    Phyllis Axline
    ------------------------------

    Original Message


  • 8.  RE: Location Services iOS

    Posted Fri August 19, 2022 04:54 AM
    Hi all

    Conscious that the original post has been here for some time, hadn't seen it!
    As Mitch has said, Apple likes user freedom, unless you want to have a more locked-down approach, where you need Supervised mode. 
    Supervised mode is Apple's response to organisational needs to lock down devices; and needs to be applied during device enrollment. 
    See details below. 

    If your device is enrolled in Supervised mode, you get to use Supervised settings in the iOS policy, which form a more locked-down or controlled approach. 
    To see how to enroll into Supervised mode, please see the bottom portion of this document. 
    The control for the "Find my iPhone / iPad" feature is found in the iOS policy:
    Security > Policies > iOS policy > Supervised settings > Restrictions & Network > Allow find my iPhone (and iPad). 

    If you enable this, you allow the user to switch on location services which includes location tracking. 
    The feature is documented by Apple: https://support.apple.com/en-ie/guide/icloud/mmfc0f2442/icloud
    This is the only control that Apple provides in this regard from a configuration perspective. 

    Supervised mode can be set up in one of 2 ways: 
    1. Apple Configurator, which is a piece of software you can download via iTunes, and install on a Mac, and connect the iOS device. 
    Using this approach,  you can enroll the device into MaaS360 into Supervised mode. For more information: 
    https://www.ibm.com/docs/en/maas360?topic=devices-apple-configurator
    2. If you have set up Apple Business Manager or Apple School Manager, you get to use Apple DEP (Device Enrollment Program). 
    This means you can lock the device serial number to the DEP platform; and ensure that if lost or stolen, the device even if wiped will re-enroll into MaaS360. 
    Devices need to have been purchased from an Apple DEP authorised reseller, and not all device resellers are authorised. 
    However, if they are, you can set up DEP with Apple: https://www.ibm.com/docs/en/maas360?topic=devices-apple-dep-configuration-guide

    Please remember that if your users are resident in a territory where Data Privacy legislation has been enacted, you may additionally need to consider your requirement to track device location: 
    https://www.ibm.com/docs/en/maas360?topic=security-managing-privacy-settings-devices-in-maas360-portal

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------

    Original Message


  • 9.  RE: Location Services iOS

    Posted Wed August 28, 2024 06:57 AM

    Hi Eamonn,

    I hope you are well.

    Now in 2024, I am just checking if there is currently a way for supervised iOS devices to have location services forced to on. I am thinking this is not possible yet as Apple still have not released those APIs.

    We have a potential opportunity to move a customer over from Samsung, but they require locations services to be on all the time with their chosen MDM.

    My initial thoughts were that it's not the MDM that's the issue, and to stick with Samsung if they need control over location services.

    Regards,

    David



    ------------------------------
    David Greetham
    ------------------------------

    Original Message


  • 10.  RE: Location Services iOS

    Posted Wed August 28, 2024 07:27 AM

    Hi David

    Thanks for the question. If you look back up on my previous post the setting is listed there. Here is a screenshot: 

    Best



    ------------------------------
    Eamonn O'Mahony
    Client Success Manager
    IBM Security
    Dublin
    ------------------------------

    Original Message


  • 11.  RE: Location Services iOS

    Posted Wed August 28, 2024 09:06 AM

    Hi David

    Thanks for question. I understand that you want admin visibility. The problem is that if the Apple ID - to which location is recorded - is a personal Apple ID, then this will be difficult or impossible. If you have managed Apple ID's - where the company has a domain that it manages for the Apple ID's on the Apple platform - then you should have admin rights to do this. 

    Alternatively if the location services are enforced by policy as above, you can also use Location Services to track the device and its history on the Location page in the individual device record. 

    Hope this helps. 



    ------------------------------
    Eamonn O'Mahony
    Client Success Manager
    IBM Security
    Dublin
    ------------------------------

    Original Message