@PhilipDAth wrote: If you ask the device for its location - or for it to check in, does it tell you its location then?
in my testing no, you must manually enable location in the ipad settings under privacy. its so silly, if its a DEP and supervised device the company should be able to force location always on. its pointless to allow the end user to just turn it off when they want to steal it or take it outside the geofence zone.
Hi @soomeGUy! I'm late to this thread, but I think the steps below will help.
Unchecking the restriction "Allow App Removal " under Restrictions> ios restrictions (supervised) will lock all apps on the device - which doesn't sound like what you want. Instead, I might make all managed apps set to auto-install, so even if a user deletes them, they will be reinstalled by SM. Using VPP device assignment will also set this up to install silently (the user can't block or deny this).
With regard to your question about geofencing and location services - at this time Apple does not provide the ability to force location services, except through Lost Mode. In your case, I might actually use IP override to gather location info for your devices, and set a geofencing policy that is active when devices are off/outside of your network. That would work even if location services have been disabled by the user.
Another option would be to use time-based tags, instead of location based tags. Do you want the device to operate different when your users are offsite - or do you simply want to know when they are offsite?