How to Enable Windows Location Services via Intune with Senturo

Overview

Microsoft recently changed how Windows applications can access Wi‑Fi and related data that reveal device location. Access to these signals is now tied to the Windows Location permission. If Location is off or blocked, apps cannot determine device position. See Microsoft’s documentation on Wi‑Fi access and location changes.

For Senturo to function correctly, you must:

1. Force allow apps to access location

2. Optionally disable the user’s ability to turn off Location Services (recommended)

This ensures consistent and accurate location reporting.

Step-by-Step Instructions

Step 1: Create a new configuration profile

1. Open Microsoft Intune admin center.

2. Navigate to Devices > Configuration

3. Click + Create > New Policy.

4. Choose:

   • Platform: Windows 10 and later

   • Profile type: Settings catalog

5. Click Create.

Step 2: Name the profile

1. Enter a Name, for example: Senturo – Enable Location Services.

2. Optionally enter a Description, e.g.: Forces apps to access location and prevents users from disabling Location Services for reliable reporting.

3. Click Next.

Step 3: Add settings

1. In Configuration settings, click + Add settings.

2. Search for and add the following:

   • Let Apps Access Location

     • Path: Privacy > Let Apps Access Location

     • Set to Enabled, then choose Force allow.

   • Turn off location (User) (optional but recommended)

     • Path: Windows Components → Location and Sensors

     • Set to Disabled.

3. Click Next.

Step 4: Assign the profile

1. (Optional) Add any Scope tags if required by your environment, then click Next.

2. Under Assignments, choose:

   • Included groups the users or device groups with Windows endpoints running Senturo.

   • Excluded groups any devices where Location Services must remain user‑controlled.

3. Click Next.

Step 5: Review and create

• Confirm your configuration, then click Create to deploy.

Verify the Policy on a Device

1. On the Windows device, go to Settings > Privacy & security > Location.

2. You should see the banner: “Some of these settings are managed by your organization.”

3. Location services should be On, and Let apps access your location should be set to On.

Troubleshooting

• Policy not applying: Check device/user assignment and ensure no conflicting location policies exist.

• Location remains off: Confirm no other GPO or Intune policy disables Location at the machine level.

• Windows Location Service disabled: Ensure the lfsvc service is not turned off by a baseline. Restore it to default startup type.

• Reboot required: A restart may be needed for changes to fully take effect.

Policy Reference

• Let Apps Access Location

  • Scope: User

  • State: Enabled → Force allow

• Turn off location (User)

  • Scope: User

  • State: Disabled (recommended)

Conclusion

By enabling Windows Location Services through Intune and combining both policy settings in a single profile, you ensure that Senturo can consistently report accurate device locations. The configuration removes user error risks, aligns with Microsoft’s updated Wi‑Fi/location API requirements, and simplifies device management at scale.

FAQs

Q: What happens if devices still show Location off after applying the policy?
A: Check for other GPOs or Intune profiles that may conflict, and confirm the Windows Location Service (lfsvc) is enabled. A reboot may also be required.

Q: How long does it take for the policy to apply?
A: In most cases, policies apply within a few minutes, but it can take up to 20 minutes depending on device check-in frequency with Intune.

Q: Why disable the user toggle?
A: If a user turns Location off, Senturo cannot collect location data. Disabling the toggle ensures uninterrupted reporting.

Q: Assign to users or devices?
A: These are user‑scope privacy settings. Assigning to users is recommended so the policy follows the signed‑in account.