Alexander

February 27, 2012 at 8:33 am

Hello!

My question is not about this topic.

I’ve seen in some mdm companies apps function to gps-tracking (http://www.amtelnet.com/mdm/lost-device-gps-tracking.php, http://www.amtelnet.com/mdm/lost-device-gps-track, http://www.amtelnet.com/mdm/lost-device-gps-track)>…

Is it possible to do with just mdm? Or this tracking made by some kind of ip location service?

david_schuetz

February 27, 2012 at 10:16 am

Apple’s MDM system does not provide geolocation capability. This functionality can be provided by a 3rd party vendor through use of vendor-specific programs on the device, which might be able to periodically poll for position changes and send that information back to a central location, where the MDM console could then display and make use of it.

The MDM server might also, as you suggest, be able to use an IP geolocation service to infer the device’s location based on the IP it’s checking in from, but that won’t be as accurate as getting an actual GPS fix.

Alexander

February 27, 2012 at 11:05 am

Thank you for response!

With third party app installed, from mdm I cant launch this app on user device? and if user disables location service or close app I couldnt trace it? Too bad there is no way in mdm to get just gps coordinates…

david_schuetz

February 27, 2012 at 12:04 pm

That’s correct — MDM can install an application (which still needs the user’s approval), but it cannot force the app to actually launch. Even the push notification system won’t cause the app to launch (but the app will get the notification directly if it’s in the foreground when the push message arrives).

I was kind of surprised that coordinates weren’t returned in the generic DeviceInfo command, or that there wasn’t a specific GPS command. It may be that there is some method, and that I simply haven’t found it yet, but I believe that 3rd party vendors also require the use of the external application to collect geolocation information.

Alexander

February 29, 2012 at 1:02 am

Interesting what command Apple use in Find my iPhone… maybe mitmproxy can help