Which feature allows IT administrators to manage location settings on a device?

Configuration profiles are XML files (.mobileconfig) that contain payloads to load settings and authorization information onto Apple devices. IT administrators use a Mobile Device Management (MDM) solution to deploy these profiles. Specifically, the "Restrictions" payload within a configuration profile allows an administrator to manage location services. This payload can be configured to prevent the user from enabling or disabling location services, thereby enforcing a specific organizational policy on the device. This is the direct mechanism for managing the setting itself.

B. Find My: This is a consumer-facing application and service for users to locate their own Apple devices. It is not an administrative tool for managing device settings.
C. iCloud: This is Apple's suite of cloud services for consumers, used for data syncing and backups. It does not provide IT administrators with tools to manage device settings.
D. MDM: MDM is the protocol and framework used to remotely deploy configuration profiles and send commands to devices. While essential for management, the configuration profile is the specific feature that contains the actual settings payload.

1. Apple Platform Deployment (Published: October 24

2023): In the section "MDM restrictions for iPhone and iPad devices

" the documentation lists the setting "Allow enabling or disabling Location Services." This setting is managed via a restrictions payload deployed by an MDM solution. The payload is part of a configuration profile.

Source: Apple Platform Deployment

"MDM restrictions for iPhone and iPad devices

" under the "Functionality restrictions" subsection.

2. Apple Developer Documentation (Configuration Profile Reference): The com.apple.applicationaccess payload

commonly known as the Restrictions payload

contains the key allowLocationServices. Setting this key to false in a configuration profile prevents the user from modifying the state of location services.

Source: Apple Developer Documentation

"Restrictions

" Payload-Specific Properties

allowLocationServices key.

3. Stanford University - MyDevices Service Documentation: University IT documentation explains how MDM enrollment uses configuration profiles to enforce security policies. It states

"MDM allows Stanford to configure and apply settings... These settings are applied through a 'configuration profile' that is installed on your device." This illustrates the relationship where MDM delivers the profile that contains the settings.

Source: Stanford University IT

"Mobile Device Management (MDM) at Stanford: Frequently Asked Questions

" What is MDM? section.