Deploy Turn Off Location Policy using Intune

Here, this post will help you in the deployment of the Turn Off Location Policy Using Intune. We’ll make use of Intune’s Settings Catalog to install this policy. We are using configuration Profiles of Intune to deploy the Turn Off Location Policy Using Intune.

Turn Off Location Policy configuration impacts the location feature, encompassing GPS or other location-tracking functionalities. From a security standpoint, it is generally advisable to refrain from disclosing your location to software, except in cases where legitimate applications such as mapping software require it. Nevertheless, in high-security environments, the use of location-tracking features should be approached with caution.

In environments where security is of paramount importance, the use of location-tracking features is discouraged. High-security settings demand heightened scrutiny of potential vulnerabilities, and unnecessary disclosure of location information may be deemed an unnecessary risk.

While the default recommendation leans towards limiting location disclosure, there are valid use cases for location services, particularly in applications like mapping software. Such applications rely on accurate location information to provide relevant and personalized services.

Patch My PC
Deploy Turn Off Location Policy Using Intune Fig.1
Deploy Turn Off Location Policy Using Intune Fig.1

Turn Off Location Policy using Intune

To create a Turn Off Location Policy, follow the steps stated below:

  • Sign in to the Intune Admin Center portal https://intune.microsoft.com/.
  • Select Devices > Windows > Configuration profiles > Create a profile.

In Create Profile, I select Windows 10 and later in Platform and select Profile Type as Settings catalog. Click on the Create button.

Deploy Turn Off Location Policy Using Intune Fig.2
Deploy Turn Off Location Policy Using Intune Fig.2

On the Basics tab pane, I provide a name for the policy “Turn Off Location Policy.”

  • Optionally, if you want, you can enter a policy description and proceed by selecting “Next“.
Deploy Turn Off Location Policy Using Intune Fig.3
Deploy Turn Off Location Policy Using Intune Fig.3

Now in Configuration Settings, Click Add Settings to browse or search the catalog for the settings I want to configure.

Adaptiva
Deploy Turn Off Location Policy Using Intune Fig.4
Deploy Turn Off Location Policy Using Intune Fig.4

In the Settings Picker windows, I searched for the keyword Allow Location. I found the category System and selected this.

  • When I select that option as stated above, I see the sub-category Allow Location. After selecting that, click the cross mark at the right-hand corner, as shown below.
Deploy Turn Off Location Policy Using Intune Fig.5
Deploy Turn Off Location Policy Using Intune Fig.5

Here in the System, we have three different options for the Allow Location setting. These are:

  • Force Location Off. All Locations Privacy settings are toggled off and greyed out. User cannot change the setting, and no apps are allowed access to the Location service, including Cortana and Search.
  • Location service is allowed. The user has control and can change Location Privacy settings on or off.
  • Force Location On. All Locations Privacy settings are toggled on and greyed out. User cannot change the setting and all consent permissions will be automatically suppressed.

As depicted in the below image, I choose the first option which is Force Location Off.

Deploy Turn Off Location Policy Using Intune Fig.6
Deploy Turn Off Location Policy Using Intune Fig.6

Using Scope tags, you can assign a tag to filter the profile to specific IT groups. One can add scope tags (if required). More details on Intune Scope Tags Implementation Guide.

  • Click Next to continue.

Now in Assignments, in Included Groups, you need to click on Add Groups and choose Select Groups to include one or more groups. Click Next to continue.

Deploy Turn Off Location Policy Using Intune Fig.7
Deploy Turn Off Location Policy Using Intune Fig.7

In the Review + Create tab, I review settings. After clicking on Create, changes are saved, and the profile is assigned.

Deploy Turn Off Location Policy Using Intune Fig.8
Deploy Turn Off Location Policy Using Intune Fig.8

After successfully creating the “Turn Off Location Policy,” a notification will appear in the top right-hand corner confirming the action. You can also verify the policy’s existence by navigating to the Configuration Profiles list, where it will be prominently displayed.

Your groups will receive your profile settings when the devices check in with the Intune service. The Policy applies to the device.

Intune Report for Turn Off Location Policy

From the Intune Portal, you can view the Intune settings catalog profile report, which provides an overview of device configuration policies and deployment status.

To track the assignment of the policy, you need to select the relevant policy from the Configuration Profiles list, which is the Turn Off Location Policy. Then, you can review the device and user check-in status to determine whether the policy has been successfully applied.

  • If you require more detailed information, you can click on “View Report” to access additional insights.
Deploy Turn Off Location Policy Using Intune Fig.9
Deploy Turn Off Location Policy Using Intune Fig.9

Intune MDM Event Log – Turn Off Location Policy

You can leverage event IDs 813 and 814 to verify the successful implementation of String or integer policies for the Turn Off Location Policy on Windows 10 or 11 devices through Intune.

These event IDs provide valuable insights into the Turn Off Location Policy‘s application status and the specific value assigned to the policy on those devices. In the case of this particular policy, the value is String and is linked to the event ID 813.

By analyzing these event IDs, you can clearly understand the policy’s application status and the corresponding value associated with it on the devices in question.

To confirm this, you can check the Event log path – Applications and Services Logs – Microsoft – Windows – Devicemanagement-Enterprise-Diagnostics-Provider – Admin.

MDM PolicyManager: Set policy string, Policy: (AllowLocation), Area: (System), EnrollmentID requesting merge: (5B88AEF1-09E8-43BB-B144-7254ACBBDF3E), Current User: (Device), String: (<disabled/>), Enrollment Type: (0x6), Scope: (0x0).

Deploy Turn Off Location Policy Using Intune Fig.10
Deploy Turn Off Location Policy Using Intune Fig.10

When I opened the above Event log, I found that the Turn Off Location Policy I applied to the device was successfully implemented.

  • By reviewing the log entry shown in the above image, the Event Viewer, I came across essential information, including the Area and Enrollment ID.

These details play a significant role in identifying the corresponding registry path. To locate the specific information, please consult the table provided below:

AreaPolicyIntScopedEvent ID
SystemAllowLocation0Device813
Table 1 – Deploy Turn Off Location Policy Using Intune

The details presented in the table above for the Deploy Turn Off Location Policy Using Intune can be employed to access the registry settings that hold the group policy configurations on a specific computer. T

To accomplish this, you can execute “REGEDIT.exe” on the target computer and navigate to the precise registry path where these settings are stored.

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\5B88AEF1-09E8-43BB-B144-7254ACBBDF3E\default\Device\System

When you navigate the above path in the Registry Editor, you will find the registry key named AllowLocation. Also, when I navigated to the above path, I saw that the Registry Key was created successfully.

Registry NameData
AllowLocation0
Table 2 – Deploy Turn Off Location Policy Using Intune
Deploy Turn Off Location Policy Using Intune Fig.11
Deploy Turn Off Location Policy Using Intune Fig.11

Windows CSP Details AllowLocation

We will see Windows CSP Details for this Policy setting AllowLocation. This setting relating to location services involves a delicate balance between usability and security. While legitimate applications may require access to location information for enhanced functionality, careful consideration and user awareness are essential to mitigate potential security and privacy risks, especially in environments where security is a top priority..

CSP URI – ./Device/Vendor/MSFT/Policy/Config/System/AllowLocation

Deploy Turn Off Location Policy Using Intune Fig.12
Deploy Turn Off Location Policy Using Intune Fig.12

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click hereHTMD WhatsApp.

Author

Abhinav Rana is working as an SCCM and Intune Admin with several years of experience. He loves to help the community by sharing his knowledge. He is a B.Tech graduate in Information Technology.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.