Privacy and Security Enable or Disable Location Services in Windows 11


Location_banner.webp

This tutorial will show you how to enable or disable location services for all users on your Windows 11 device.

Microsoft operates a location service that helps determine the precise geographic location of your Windows device. The precise location of your device allows apps to give you directions, show shops and restaurants that are near you, and more.

Many apps and services request location information from your device, and the Windows location service gives you control over which apps are allowed to access your precise location.

How the location settings work

Location services is a device-wide setting that can be controlled by the device administrator. When turned on, it enables certain Windows features—such as auto-setting the time zone or Find my device—to function properly. When this location setting is enabled, the Microsoft location service will use a combination of global positioning service (GPS), nearby wireless access points, cell towers, and your IP address (or default location) to determine your device’s location. Depending on the capabilities of your device, your device’s location can be determined with varying degrees of accuracy and may in some cases be determined precisely.

If you have turned on Location services, your device sends location information (including wireless access point information, cellular tower information, and precise GPS location if available) to Microsoft after removing any data identifying the person or device before leaving the device. This de-identified copy of location information is used to improve Microsoft location services and, in some instances, shared with our location service provider partners, currently HERE and Skyhook, to improve the location services of the provider.

Additionally, with this setting turned on, each user on the device can allow apps to use their device’s location and location history to deliver location-aware services as precisely as their device supports. If you grant a specific app access to your device’s location on the settings page, that app will have access to precise location information. Otherwise the location information provided to the app has lower accuracy. When your location is used by a location-aware app or Windows service or feature, your location information and recent location history are stored on your device.

If an app or feature accesses the device's location and you are signed in with your Microsoft account, your last-known location information is also saved to the cloud, where it is available across your devices to other apps or services that use your Microsoft account and for which you've granted permission. If you are signed in with your Microsoft account and your device cannot reliably determine your current location on its own (such as when you are in a building or basement), apps or services can use your last-known location from your location history that is stored in the cloud if it is available. Data about a Windows device's recent location history is also stored on the device even if no Microsoft account is in use, and certain apps and Windows features can access this location history.

There are some exceptions to how your device’s location can be determined that are not directly managed by the location settings.

Desktop apps are a specific type of app that won’t ask for separate permission to discover your device location information and won’t appear in the list that allows you to choose apps that can use your location. What are desktop apps? They’re usually downloaded from the internet or installed with some type of media (such as a CD, DVD, or USB storage device). They’re launched using an .EXE or .DLL file, and they typically run on your device, unlike web-based apps (which run in the cloud).

Even when you’ve turned off Location services in Windows, some third-party apps and services could use other technologies (such as Bluetooth, Wi-Fi, cellular modem, etc.) to determine your device’s location with varying degrees of accuracy. Microsoft requires third-party software developers that develop apps for our Microsoft Store or develop apps using Microsoft tools to respect the Windows location settings unless you’ve provided any legally required consent to have the third-party developer determine your location. However, to further reduce the risk that an app or service can determine your location when the Windows device location setting is off, you should only install apps and services from trusted sources. For more comprehensive protection of your location, you could consider disabling radio-based components of your device such as Wi-Fi, Bluetooth, cellular modem, and GPS components, which might be used by an app to determine your precise location. However, doing so will also impair other experiences such as calling (including emergency calling), messaging, internet connectivity, and connecting to peripheral devices like your headphones. Please read the privacy policies of the apps and services you’ve installed to learn more about how they use your device’s location.

To facilitate getting help in an emergency, whenever you make an emergency call, Windows will attempt to determine and share your precise location, regardless of your location settings. In addition, your mobile operator will have access to your device’s location if your device has a SIM card or is otherwise using a cellular service.

Starting with Windows 11 build 23486, if location settings are disabled, a warning is now shown to the user, urging them to enable location settings to ensure accurate time zone adjustments. This warning provides helpful information to the user, helping them understand why their time zone may not be correct and guiding them towards resolving the issue.

Starting with Windows 11 build 26220.8271 (Beta 25H2) and build 26300.8276 (Dev 25H2), based on feedback, Microsoft is providing clarity regarding location options in Settings > Privacy & Security > Location. When Location services is turned off, options like Default location and Allow location override are unavailable because apps and services aren’t receiving location info. To make that clearer, these options will now appear disabled (greyed out) until Location services is turned back on.

You must be signed in as an administrator to turn on/off or enable/disable location services for the device.

Location services require the Geolocation Service to be enabled and running.

Set time zone automatically will be grayed out and disabled if you turn off or disable location services.

If one or more apps are currently using your device location through the Windows location service, you’ll see the Location notification icon on the taskbar corner to let you know.

For the Allow location override setting to work, the Location services setting for both the local and remote devices needs to be turned on. Additionally, the app being used to manage the remote connection should have been allowed access to use location.




Contents

  • Option One: Turn On or Off Location Services in Settings
  • Option Two: Turn On or Off Location Services using Command
  • Option Three: Enable or Disable Location Services in Local Group Policy Editor
  • Option Four: Enable or Disable Location Services using REG file


EXAMPLE: Location notification icon on taskbar corner when an app is using your location

You can over on the location notification icon to see which apps are currently using your location.


Location_notification_icon_on_taskbar_corner.png
Hover_on_location_icon.png





Option One

Turn On or Off Location Services in Settings


1 Open Settings (Win+I).

2 Click/tap on Privacy & security on the left side, and click/tap on Location on the right side. (see screenshot below)


Location_services_Settings-1.png

3 Turn On (default) or Off Location services for what you want. (see screenshots below)

Location_services_Settings-2.png
Location_services_Settings-3.png

4 If you turned off Location services, then click tap on Turn off to confirm. (see screenshot below)

Location_services_Settings-4.webp

5 You can now close Settings if you like.




Option Two

Turn On or Off Location Services using Command


1 Open Windows Terminal (Admin), and select either Windows PowerShell or Command Prompt.

2 Copy and paste the command below you want to use into Terminal (Admin), and press Enter to apply. (see screenshot below)

Turn on Location services
SystemSettingsAdminFlows.exe SetCamSystemGlobal location 1

OR

Turn off Location services
SystemSettingsAdminFlows.exe SetCamSystemGlobal location 0

Location_Services_command.webp





Option Three

Enable or Disable Location Services in Local Group Policy Editor


The Local Group Policy Editor is only available in the Windows 11 Pro, Enterprise, and Education editions.

All editions can use Option Four to configure the same policy.


1 Open the Local Group Policy Editor (gpedit.msc).

2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)

Computer Configuration > Administrative Templates > Windows Components > Location and Sensors

Location_services_gpedit-1.png

3 In the right pane of Location and Sensors in the Local Group Policy Editor, double click/tap on the Turn off location policy to edit it. (see screenshot above)

4 Do step 5 (enable) or step 6 (disable) below for what you want.

5 Enable Location Services

This is the default setting to allow using Option One and Option Two.


A) Select (dot) Not Configured, click/tap on OK, and go to step 7 below. (see screenshot below)​

Location_services_gpedit-2.png

6 Disable Location Services

This will disable location services, and prevent using Option One and Option Two.


A) Select (dot) Enabled, click/tap on OK, and go to step 7 below. (see screenshot below)​

Location_services_gpedit-3.png

7 You can now close the Local Group Policy Editor if you like.




Option Four

Enable or Disable Location Services using REG file


1 Do step 2 (enable) or step 3 (disable) below for what you want.


 2. Enable Location Services

This is the default setting to allow using Option One and Option Two.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Enable_location_services.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessLocation"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors]
"DisableLocation"=-


 3. Disable Location Services

This will disable location services, and prevent using Option One and Option Two.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Disable_location_services.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessLocation"=-

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors]
"DisableLocation"=dword:00000001

4 Save the .reg file to your desktop.

5 If you have Smart App Control turned on, you will need to unblock the downloaded REG file.

6 Double click/tap on the downloaded .reg file to merge it.

7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

8 You can now delete the downloaded .reg file if you like.


That's it,
Shawn Brink


 

Attachments

Last edited:
Thanks for the info @agadiffe !, using SystemSettingsAdminFlows.exe SetCamSystemGlobal location 0 will work perfectly for my case.
Funny thing; If a non-admin user has already opened Settings app to Privacy & Security > Location and the command above is executed from admin command prompt (0 to turn Off the location services toggle), it gives a question on Settings GUI whether user wants to do it or not AND that window is actually "semi-frozen". User can still click the buttons causing an UAC prompt. However, whatever user does, even cancel the UAC prompt, the setting is already saved and apllied. We'll solve this by closing the settings app beforehand (just in case):
taskkill /f /im SystemSettings.exe /t
This GUI question doesn't trigger if the command isSystemSettingsAdminFlows.exe SetCamSystemGlobal location 1
(to turn On the location services toggle).
 

My Computer

System One

  • OS
    Windows 11
    Manufacturer/Model
    HP/ASUS/LENOVOY/DELL/CUSTOM
    CPU
    Mostly Intel
    Motherboard
    What ever is available
    PSU
    200-1200W
    Mouse
    Any mouse
    Other Info
    1000+ computers
Without GPO, another solution is to use : SystemSettingsAdminFlows.exe SetCamSystemGlobal location 0
(visible in Procmon) (0: disabled | 1: Enabled) ("SetCam" stands for "Capability Access Manager," not for webcam)
This command controls the SystemGlobal toggle (e.g. Location services or Camera access) not the user toggle (e.g. Let apps access your location/camera).

Thank you. I've updated option 2 in the tutorial to use this command to make it easier. :shawn:
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    TerraMaster F8 SSD Plus NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Amazon Basics Wired Full Keyboard MD005
    Mouse
    Logitech MX Master 4
    Internet Speed
    2 Gbps Download and 100 Mbps Upload
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
Thank you. I've updated option 2 in the tutorial to use this command to make it easier. :shawn:
Open Windows Terminal (Admin),
It doesn't need to be run as Admin. A non-elevated PowerShell works just fine.
If launched from a standard user on a non-elevated prompt, the admin credential will be asked with UAC.

it gives a question on Settings GUI whether user wants to do it or not AND that window is actually "semi-frozen".
yeah, just like when you toggle the setting off manually.
SystemSettingsAdminFlows.exe is what the Settings app call. So it behave the same way.


User can still click the buttons causing an UAC prompt. However, whatever user does, even cancel the UAC prompt, the setting is already saved and apllied.
I got the same behavior. Funny indeed.
I guess the setting is applied even if you cancel the second UAC prompt, because the tool doesn't require admin privileges. it only needs to be launched from an admin account (the first UAC when you launch the command on a standard account).
If the GUI app doesn't show a "turn off" popup, like Camera for example, you only get a single UAC prompt.
 

My Computer

System One

  • OS
    .
Back
Top Bottom