Intune Geotracking: What Organization Need to Know About Location Data, Connectivity, and Visibility

March 31, 2026
Understand Intune geotracking: one-time locate requests, accuracy limits, and short retention. Compare with Senturo for continuous visibility and reporting.
No items found.

Laptops and tablets are central to daily work. When one disappears, IT teams are asked:

  • Where was it last seen
  • Does it hold sensitive data
  • How many devices are offline or unmanaged

Microsoft Intune is often the main tool for enrollment, compliance, and remote actions. Its Locate and Lost Mode features are helpful, but they are not a 24/7 live-tracking system and are not available for all managed devices.

How Intune Geotracking Works

Intune uses a remote action called Locate device. When an admin runs it, Intune asks the operating system for the device location and displays a point on a map. Location is not collected continuously, only when the action is requested.

Intune Locate Device Features

Aspect Intune features
Data source OS location services on Android Enterprise, supervised iOS/iPadOS, and Windows
Trigger Admin clicks Locate device in the Intune admin center
Result Single location point on a map with address and coordinates
Offline devices Shows the last known location if the device checked in during the past week
Data collection Location is gathered only when the action runs
Data retention Location stored for 24 hours, and the last known point may be available for up to 7 days, depending on the platform

Lost Mode is a separate Intune remote action for supervised, corporate iOS and iPadOS devices. It locks the screen and displays a custom message and phone number; you then use Locate device to see where the device is.

Intune Technical Requirements That Affect Accuracy

Whether Location returns something useful depends on several technical links in a chain.

Reliability chain

Requirement What it needs Typical org risk
Power The device must be on and not drained Deep sleep carts and older laptops often have dead batteries
Connectivity The device needs WiFi or cellular to reach Intune WiFi only devices that never connect at home
Permissions OS location services must allow Intune Privacy settings or profiles may block access
Hardware GPS or at least WiFi and IP data Many laptops rely only on WiFi or IP estimates
OS behavior Platform support and correct enrollment or supervision Android or iOS devices are not enrolled or supervised properly

The official Intune documentation highlights several platform and configuration requirements. Devices must be in Android Enterprise corporate ownership modes, supervised iOS or iPadOS, or Windows. Location services need to be enabled, and Android devices require explicit restriction settings.

When any part of this setup is missing, the action may return no location at all, or only a rough approximation.

Intune Required Connectivity and WiFi Profiles

Typical Situations

Scenario What Intune can show
On org WiFi Current location when the action runs
On a known home WiFi Current home location when the action runs
Never joins home or public WiFi Only on-site locations, nothing new until it reconnects
Went offline three days ago Last known point, if check-in was within seven days

Android Enterprise dedicated devices send the last known location at check-in or every 8 hours, and Intune can display it for up to 7 days, even if the device is offline when you request a location.

To improve results, many organizations:

  • Use the same SSIDs across all locations
  • Provide organization-controlled WiFi for remote workers when possible.
  • Ask take-home fleets to check in on-site periodically.

How Accurate is Intune Geotracking?

Intune uses the OS location service, which combines GPS, Wi-Fi, cell towers, and IP-based geolocation. Intune does not apply extra positioning logic. It relies on the operating system’s own location framework.

Intune Location History and Retention

Intune is built for one-time lookups rather than tracking movement.

According to Microsoft documentation:

  • Location is collected only when the action runs
  • Events stay in the system for twenty-four hours and are then removed
  • Some Android Enterprise dedicated devices keep a last known point for up to seven days
  • Location data is encrypted when sent and when stored.

If you need long-term historical paths for investigations or leadership reporting, Intune is not designed for that role.

Intune Limitations

Intune can locate a device when an admin runs the Locate device command. It does not build a location history or track movement in the background. Location is removed after a short retention period. This design works for basic checks, but organizations often need more.

During missing device cases, insurance claims, or safety investigations, some organizations need:

  • A timeline of where the device has been
  • Reliable evidence for reports
  • Alerts when devices leave an approved area
  • Tracking that continues even when the device is not currently online

When only a point-in-time lookup is available, recovery and claims take longer.

Feature Comparison: Senturo vs Intune

Both tools rely on OS location services and network data. They are designed for different primary jobs.

Feature Intune Senturo
Core purpose Device management, compliance, and app deployment Device security, recovery, visibility, safety workflows
Location trigger Locates only when the admin runs Locate device or Lost Mode Scheduled updates plus on-demand actions, faster during Missing Mode
Data collection Location is collected only when triggered, stored for 24 hours, and is available for up to 7 days on some Android devices. Continuous location and network data, with history retained in accordance with your organizational policies.
Update cadence Point in time when the action runs Updates every set interval, as low as ten minutes, then in real time during Missing Mode
Offline behavior Shows the last known point when available Shows the last known point plus the path before going offline
Platform coverage Android Enterprise, supervised iOS and iPadOS, Windows for locating devices Windows, ChromeOS, macOS, iOS, Android in one console
Lost or locked Lost Mode for supervised corporate iOS and iPadOS Multi-platform lock, including overlay lock for Chromebooks, Windows, and macOS that continues sending location
Geofencing Network or region controls through Conditional Access (not GPS per device) GPS and IP-based fences can send alerts or actions when devices enter or leave an area (depending on the platform)
Messaging Lock screen message in Lost Mode Cross-platform broadcast messages plus lock screen messaging
Visibility Per device actions in the admin center Map and timeline across devices, groups, or organizations with exportable evidence

Why Organizations Use Both Intune + Senturo Together

In practice, many organizations run Intune and Senturo side by side rather than choosing one.

A typical split of responsibilities:

  • Intune handles enrollment, configuration profiles, compliance policies, and app deployment across supported platforms.

  • Senturo provides cross-platform location visibility, Missing Mode workflows, reporting, and evidence, and integrates with any existing MDMs such as Intune.

 FAQ

Does Intune have GPS tracking? 

Intune does not run its own GPS system. It calls the operating system’s location services on supported platforms when you run Locate device. If the device has GPS, Wi-Fi, or IP-based location, Intune will use that information to plot a point on the map.

Can Intune track location?

Yes, for supported Windows, Android Enterprise, and supervised iOS/iPadOS devices. Intune can show its location when an admin runs the Locate device action, and the device is online and allowed to share location. It does not track location continuously by default; the data is only held for 24 hours.

Does Intune do geofencing?

Not in the sense of GPS-per-device alerts when a device crosses a drawn boundary. You can combine Intune with Microsoft Entra Conditional Access and named locations to restrict access by country, region, or network, sometimes described as "geofencing," but it is based on IP and network data, not GPS.

Can MDM locate devices?

Capabilities differ by platform, enrollment type, and privacy controls, so each organization should test Windows, Android, iOS/iPadOS, macOS, and ChromeOS scenarios separately.

Can Intune see my history?

Intune keeps device and management history, such as compliance status, configuration, and app deployments. It does not, by default, maintain a full personal browsing history or an always-on location trail. For location, it focuses on the short-lived results of the Locate device and Lost Mode.

What is the Intune equivalent of GPUpdate?

There is no direct GPUpdate command. In Intune, you use a device sync. Admins can trigger Sync in the Intune admin center, and users can trigger Sync in the Company Portal app, which prompts the device to contact Intune and apply new policies sooner than the standard schedule.

Björn Hall, Co-Founder & CEO @ Senturo

Björn Hall is an experienced software entrepreneur in mobile security fleet management. As Co-Founder & CEO, he has led Senturo’s evolution into a powerful enterprise solution, delivering advanced geo-tracking, compliance automation, and security enforcement across macOS, Windows, iOS, Android, and Chrome OS. More about Björn