Already a NinjaOne customer? Log in to view more guides and the latest updates.

How to Lock Location Services on Android

Impact of Disabling Location Tracking on a Managed Mobile Device

Disabling location services Android device managed by a Mobile Device Management (MDM) system can severely affect an organization’s security, compliance, and operational efficiency. Location services are essential for tracking lost or stolen devices, and without them, IT teams lose the ability to recover such devices.

This can also lead to non-compliance with industry regulations that require location tracking, potentially exposing the company to legal and financial penalties. When location services are disabled, these critical security measures become ineffective, leaving sensitive data vulnerable.

Additionally, organizations that rely on field workers or remote employees may find it difficult to track attendance and productivity without location tracking. To avoid these issues, it is vital for organizations to configure their MDM systems to prevent users from disabling location services, ensuring data security, regulatory compliance, and operational efficiency.

How Can I Prevent Location Tracking From Being Disabled on a Device Managed by NinjaOne MDM?

In NinjaOne MDM, Android devices can be enrolled as BYOD (Bring your own device) mode or Company owned mode.

End users can disable location tracking on their mobile devices when enrolled in BYOD mode. Since they are the owners of these personal devices, they have full control over the settings, including the option to turn off location services.

This is because in BYOD mode, the organization does not have full ownership or control over the device itself, and security measures are primarily focused on protecting corporate data and systems. As a result, the decision to disable location services is ultimately up to the device owner, and they assume any personal risks associated with this choice.

On the other hand, on company owned devices, location tracking cannot be disabled by the end user. Location services are controlled through policies set by the organization, ensuring that they always remain active. Once location tracking is enabled at the policy level, it becomes a fixed setting that users cannot alter or disable. This centralized control ensures that IT administrators maintain full visibility over devices, allowing for effective tracking and security enforcement.

No additional configurations are required beyond the initial policy setup, as NinjaOne automatically enforces these settings across all managed devices. This guarantees that devices remain secure and compliant without relying on user intervention.

FAQ

Location services for mobile devices, refer to a set of tools that allow apps and system services to determine a device’s geographic location.

In NinjaOne, location tracking settings are managed through policies. To modify the location settings in a policy, follow these steps:

  1. Navigate to Administration> Policies > MDM policies.
  2. Find and select the policy you want to modify.
  3. In the policy editor, click Location tracking from the left side panel.
  4. Adjust the settings as needed and click Save.

In iOS supervised mode, once location tracking is enabled, the end user cannot disable it. While the end user could reset the device to factory defaults and temporarily stop all management, the device will automatically re-enroll and return to management, along with all policy settings—including location tracking—once it reconnects to the internet.

In contrast, on BYOD enrolled iOS devices, MDM administrators cannot prevent users from turning off Location Services. Apple’s User Enrollment framework is designed to protect personal privacy, so location tracking and related settings remain fully under the user’s control and cannot be enforced remotely.

Some MDM solutions allow end users to disable location services on company-owned devices, requiring workarounds to mitigate this. However, this is not the case with NinjaOne. Once location services are enabled at the policy level, location tracking is locked on the device, and the end user cannot disable it.

The user could, however, reset the device to factory defaults, which would stop all management of the device. To prevent this, you can enable the “Factory reset disabled” setting in your Android policy.

To do so:

  1. From the NinjaOne main console, navigate to Administration > Policies > MDM Policies, then select your desired policy.
  2. From the left-side panel, choose Restrictions.
  3. On the right side, under the Functionality section, locate Factory reset disabled and check the box.