How Can Schools Use Geofencing to Protect District Devices?

Geofencing creates a virtual boundary around a campus, district, or other location. When an enrolled device enters or leaves that boundary, Senturo can alert authorized staff or run a preconfigured security automation.

Every monitored item must be an enrolled device running a supported operating system.

Key Takeaways

• An Outside Geofence rule responds when a device leaves a defined area.
• An Inside Geofence rule responds when a device enters a defined area.
• Schools can create circular or jurisdiction geofences directly in Senturo.
• Tailored geofences can be requested at no additional cost.
• Policies can be assigned to selected device groups and connected to scheduled security actions.
• Senturo geofencing is available as an add-on.

How Does Senturo Geofencing Work?

Senturo geofencing is configured through Security Policy Automations. Each automation follows four stages:

1. Rules
2. Device groups
3. Actions
4. Scheduling

The administrator selects one rule for each automation. Location-based options include Outside Geofence and Inside Geofence. Other available rules include IP Fencing, Scheduled Tracking, Time-Locked Access, and Senturo Agent Phone Home.

Step-by-Step Process for Creating a Geofence Automation

‍

‍

Step 1: Create a new automation

Open Security Policy Automations in Senturo and select Create Automation.

Step 2: Choose the geofence rule

Select one of the following rules:

• Outside Geofence: Runs when a device leaves the selected area.
• Inside Geofence: Runs when a device enters the selected area.

Only one rule can be selected for each automation.

Step 3: Create or select the geofence

Create a circular or jurisdictional geofence in the Senturo Geofence Builder or select an existing geofence.

Senturo can also create tailored geofences on request. These may follow a school property line, district jurisdiction, state boundary, or a group of specific locations.

Step 4: Choose the device group

Select the device group covered by the policy. Separating devices into groups helps districts apply the right policy to each use case. A take-home laptop can have a wider approved area than an iPad assigned to a classroom cart.

Step 5: Select the action

Choose the action that Senturo should run when a device enters or leaves the geofence.

Available actions include:

• Send Email to Admin
• Add or remove a device from a group.
• Add or remove a device tag.
• Add a note to the device.
• Set Missing Mode, which triggers real-time location reporting
• Pull Current Location
• Take Screenshots
• Pull Current Network Data
• Apply Senturo Lock, which blocks access and displays a custom lock screen.
• Apply Senturo Unlock
• Send Broadcast
• Wipe Files

The actions available for a particular device depend on its operating system and configuration.

Step 6: Schedule the policy

Choose when the automation should run. Scheduling helps account for expected device movement.

Step 7: Review and activate the automation

Review the selected rule, device group, action, and schedule before activating the automation. Testing the policy with a small device group first can help the district confirm that the boundary and response work as intended.

Outside Geofence Scenarios for K-12 Schools

An Outside Geofence rule runs when a device leaves its approved area.

Classroom cart devices leaving campus

A school can place a geofence around the campus and assign it to the devices stored in classroom carts.

If one leaves the boundary, Senturo can notify an administrator, activate Missing Mode, apply Senturo Lock, pull its current location, add a tag, or run another configured action.

This can help identify a device that was:

• Removed from a classroom without approval
• Placed in a student’s backpack
• Taken during an evening event
• Moved off campus unexpectedly

Testing devices leaving an approved site

Districts often prepare dedicated laptops for state testing.

A geofence around the testing campus can help identify when one of those devices leaves the approved location during the assessment window. The district could notify the testing coordinator, add a device note, send a broadcast, lock the device, or tag it for follow-up.

Spare devices leaving the warehouse

District warehouses may contain hundreds or thousands of unassigned devices.

A geofence can be applied to enrolled spare devices so that IT receives an alert when one leaves the warehouse. This provides additional context when equipment is transferred, repaired, issued, or moved without a completed asset record.

Senturo can also show the last logged-in user with timestamps, helping IT identify who last accessed the device and when.

Devices leaving the district

A district can create a wider boundary around the district, county, or state.

If a device travels outside that area, IT can review:

• Its assigned user
• Its current or last reported location
• Recent network information
• Location history
• Device status
• The last logged-in user

Campus-only devices moving after hours

Some faculty laptops, shared tablets, and administrative devices are expected to remain at school.

A scheduled Outside Geofence policy can focus on evenings, weekends, and holidays. This reduces alerts during normal movement while identifying unusual activity after the campus closes.

Inside Geofence Scenarios for K-12 Schools

An Inside Geofence rule runs when a device enters a defined area.

A missing device entering a pawn shop

A district can create geofences around pawn shops, resale stores, or used-electronics locations near the district.

If a missing school device enters one of those areas, Senturo can notify authorized staff, pull its current location, collect network information, or activate a configured recovery action.

A geofence event should be reviewed alongside the device’s location history, assignment record, recent activity, and current status before the district escalates the case.

A missing device returning to campus

A missing device may eventually reconnect after returning to a school building.

An Inside Geofence policy can notify IT when the device enters its assigned campus again. Staff can then coordinate with the front office, library, classroom teacher, or campus technician to retrieve it.

A device entering the repair center

A district can create a geofence around its internal repair center or an approved service provider.

When a device enters, Senturo can:

• Add a repair tag
• Add a device note
• Move it into a repair group.
• Notify the technical services team.

This can support the district’s existing repair and inventory workflow.

A returned device entering the warehouse

An Inside Geofence policy around the technology warehouse can help identify when a device has returned from a campus, student, repair provider, or summer collection program.

The automation could add a “Returned to Warehouse” tag or notify the team responsible for intake and inspection.

A missing device entering an airport or transportation hub

Districts can request geofences around airports, bus terminals, shipping facilities, or other high-risk transportation locations.

An alert may give the district time to review the device’s status and coordinate with the appropriate personnel before it moves farther away.

Using Geofencing with Senturo Lock

Senturo Lock is a Security Policy Automation action that districts can trigger through a geofence. Its availability depends on the device’s operating system and configuration.

The lock screen can include:

• A contact number
• A password
• Displayed images
• A custom message of up to 300 characters

The device remains inaccessible until it is remotely unlocked or the password is entered. Lock-screen templates can also be created and reused.

Because the message appears on the lock screen, districts can use it to display return instructions, contact details, or an explanation of why the device has been locked.

For a controlled workflow, the district may also include the unlock password in the custom message so that the user can follow the instructions before regaining access.

Using Geofencing with Missing Mode

You can use geofencing with Missing Mode to begin a recovery workflow as soon as a device enters or leaves a defined area.

Once activated, Missing Mode provides real-time location reporting and can collect additional recovery information, including screenshots on supported operating systems.

Districts can also use Missing Mode alongside Senturo Lock to prevent access to the device while continuing to receive available location and network data.

Using Geofencing with Broadcast

Send Broadcast is another automation action that a geofence can trigger.

Broadcasts can be used to send:

• Return instructions
• Policy reminders
• Testing instructions
• Device-use warnings
• Contact information

This can be especially useful during state testing, when devices must remain within an approved testing location.

‍

‍

Frequently Asked Questions

What is geofencing for school devices?

Geofencing creates a virtual boundary around a campus or another location. Senturo can respond when an enrolled school device enters or leaves that boundary.

What devices can schools monitor with geofencing?

Schools can monitor enrolled devices running a supported operating system, including Chromebooks, laptops, tablets, and supported phones.

Geofencing does not independently track carts, chargers, cases, or other items that do not run an operating system.

What is the difference between Inside Geofence and Outside Geofence?

Inside Geofence runs when a device enters the selected area. Outside Geofence runs when a device leaves the selected area.

Can a geofence apply only to certain devices?

Yes. Administrators select the device group covered by each Security Policy Automation.

Can schools request a custom geofence?

Yes. Senturo can create tailored geofences for districts that need property-specific, jurisdiction-based, or more complex boundaries.

Can a geofence trigger a security action?

Yes. A geofence can be connected to actions such as sending an administrator notification, pulling location or network information, activating Missing Mode, applying Senturo Lock, adding a tag, or sending a broadcast. Available actions depend on the device’s operating system and configuration.