all my devices on the company unable to use location service

Ahmed Maher 20 Reputation points
2026-02-11T10:58:59.9433333+00:00

suddenly almost all my users unable to use location service

OS: windows 10,11

some joined to local domain and other joined to azure (hybrid mode)

already their policy on Intune and GPO to force allow the location but still same issue

User's image

Windows for business | Windows Client for IT Pros | Devices and deployment | Other
0 comments No comments

Answer accepted by question author
VPHAN 45,100 Reputation points Independent Advisor
2026-02-11T11:32:20.25+00:00

Hello Ahmed Maher

When both Intune and Active Directory GPOs are pushing configurations, Windows 10 and 11 rely on the ControlPolicyConflict policy to determine precedence, but certain explicit deny policies will always lock the graphical user interface. You need to inspect the effective registry state on an affected endpoint rather than just relying on the Intune portal reporting. Open the Registry Editor as an administrator and navigate directly to HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LocationAndSensors. If you see the DisableLocation DWORD value present and set to 1, a policy is actively disabling the Windows sensor platform globally. This specific registry key corresponds to the Active Directory GPO path Computer Configuration\Administrative Templates\Windows Components\Location and Sensors\Turn off location. If this is set to Enabled anywhere in your domain hierarchy, it completely overrides any app-level or system-level location allow policies you have configured elsewhere.

Additionally, you must verify the operational state of the Windows Geolocation Service itself. Open the Services console on an affected machine and check the properties of the lfsvc service. If a baseline security GPO, an Intune Endpoint Security profile, or a deployed PowerShell script has altered the startup type of this service to Disabled, the Windows Settings GUI will gray out the location toggle exactly as shown in your image, completely ignoring your privacy policy settings. The lfsvc service must be configured with a startup type of Manual or Automatic Trigger Start for the location toggle to be accessible and functional. I recommend reviewing your Group Policy Preferences and Intune security baselines to ensure the Geolocation Service is not being inadvertently disabled across your hybrid joined machines.

I hope you've found something useful here. If it helps you get more insight into the issue, it's appreciated to accept the answer. Should you have more questions, feel free to leave a message. Have a nice day!

VP

Was this answer helpful?

1 person found this answer helpful.
0 comments No comments

0 additional answers

Sort by: Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.