wincit

Q: Location Services, "Find My iPhone" and Restricting iCloud Account

Hello all,

 

I'm relatively a beginner with Apple.  Our organization just purchased a MDM solution and are beginning to set restrictions in policies.  I'm finding that I don't have that granular control that I'm used to with Windows Group Policy and Active Directory.  Instead of trying to figure everything out, I'd like to just start with the minimum requirements.

 

1.  We want to force users to have a screen lock with a passcode.  This one is a slam dunk.  Not having any issues with this.

2.  We want to force location services to stay on for "Find My iPhone".  Our MDM solution has a way to track location, but it is not as accurate as I'd like.  Also, I believe that "Find My iPhone" can turn on location services in lost mode and send a tone. 

3.  In order to utilize "Find My iPhone", we need to have the iCloud account locked down so that the end user cannot log out of the account.  The problem here is that the settings that I've found restricts every single account on the iPad/iPhone.  I can't find a way to just lock down the iCloud account.

 

Any help is greatly appreciated,

 

wincit

iPad Pro, iOS 9.3.2

Posted on Jun 29, 2016 10:04 AM

Close

Q: Location Services, "Find My iPhone" and Restricting iCloud Account

  • All replies
  • Helpful answers

  • by wincit,

    wincit wincit Jun 29, 2016 10:13 AM in response to wincit
    Level 1 (8 points)
    iPhone
    Jun 29, 2016 10:13 AM in response to wincit

    I would also like to add that I've turned on restrictions (manually since it doesn't appear that Apple allows MDM to control restrictions) for Location Services to not allow changes.  However, any new App that is installed will not be able to utilize Location Services.  I have to go into restrictions and check allow changes, then allow the new app to use Location Services, then check to not allow changes.  This would be acceptable if Apple would allow over MDM.  What if I need to push out a new App that requires Location Services to 200 iPhones?  Then, I would have to touch each and every one.  Hopefully I'm missing something.

     

    Thanks,

     

    wincit

  • by iToaster,

    iToaster iToaster Jul 3, 2016 5:37 PM in response to wincit
    Level 3 (739 points)
    Jul 3, 2016 5:37 PM in response to wincit

    Users can't log out of icloud without the password that was used to enroll the device in icloud/find my iphone