How to Disable Intune Location Tracking in Admin Center
Question details
An organization wants to disable or hide the Locate device option in Microsoft Intune across managed corporate devices to comply with strict internal privacy policies.

- Product
- Microsoft Intune
- Device & OS
- Windows, Android, Apple
- Scenario
- Administrators are configuring device management settings and want to restrict the ability to track user locations.
- Observed behavior
- The Locate device option is currently visible and accessible to administrators in the Intune admin center, and the organization wishes to completely hide or disable it.
You will need Intune Administrator or Global Administrator privileges to modify role-based access control (RBAC) settings in the Microsoft Intune admin center.
Restrict the Locate Device Feature via Role-Based Access Control (RBAC)
While Microsoft Intune does not have a global on/off switch to completely disable the location tracking framework, you can hide the 'Locate device' option from specific IT staff by removing the permission from their administrative roles.
The most effective way to prevent unauthorized location tracking in Intune is to use custom roles. By setting the remote task permissions for location finding to 'No', the Locate action is hidden from administrators assigned to that role.
Sign in to the Microsoft Intune admin center using your administrator credentials.
On the left sidebar, click on 'Tenant administration' and then select 'Roles'.
Select an existing custom role to edit, or click 'Create' to configure a new role for your IT administrators.
Under the Permissions settings, expand the 'Remote tasks' category. Find the 'Locate device' permission and ensure it is set to 'No' or remains unassigned.
Save your changes and assign this role to the appropriate administrator groups. These admins will no longer see the option to locate devices.

Need a Lightweight Office Suite for Managed Devices? Try WPS Office
If you are managing a large fleet of corporate devices through Intune and need a secure, cost-effective office suite, WPS Office provides excellent capabilities and compatibility without heavy resource consumption.
- 1. Download WPS Office: Visit the official WPS Office website to download the appropriate installation package for your target operating system.
- 2. Deploy via MDM: Use your endpoint management solution, such as Microsoft Intune, to distribute the lightweight application to your organization's devices.
- 3. Open and Edit Effortlessly: Start opening, editing, and saving Microsoft Office documents instantly with full format retention.

Frequently Asked Questions
Can I locate an Apple device in Intune without putting it in Lost Mode?
No. For iOS and iPadOS devices, Apple's privacy architecture requires the device to be placed in 'Lost Mode' before Intune can retrieve and display its location.
Does Microsoft Intune constantly track device locations in the background?
No, Intune does not track location continuously. The system only fetches the device's location when an authorized administrator explicitly triggers the 'Locate device' remote action in the admin center.
Will users be notified when their device location is tracked by Intune?
Yes, depending on the OS. For example, when a Windows device is located, the user typically sees a location notification icon in the system tray, indicating that location services have been accessed.




