Hello,
Thanks for reaching out to Hexnode Connect.
Yes, someone must physically open the app and grant permission. Even if the policy is successfully deployed and the Hexnode UEM app is installed silently via VPP, Apple’s MDM framework strictly prevents any MDM solution from remotely enabling Location Services or granting app-level privacy permissions.
For reliable iOS location tracking in Hexnode, all of the following conditions must be met:
- Policy Configuration: Location Tracking is enabled in your Enterprise policy and successfully deployed to the device.
- App Installation: The Hexnode UEM app is installed on the device (using VPP for a silent install prevents Apple ID prompts).
- Device Settings: Location Services must be turned on (Settings > Privacy & Security > Location Services).
- Manual User Approval (Crucial): The user must open the Hexnode UEM app on the device and allow location access when prompted.
If the device is not in your hands, you will need to ask the end-user to open the app and accept the permission prompt. Once they do, the Recent Location will start updating in your Hexnode portal during the next location update cycle.
I hope this helps resolve your issue. Feel free to reach out if you have any more doubts or need further assistance.
Best regards,
George,
Hexnode UEM