Geofencing allows limitations to be established as to where Systems Manager devices are allowed to be. When devices are detected outside of that area, alerts can be generated to notify administrators and designated profiles can be applied or removed. For more accurate location results, the systems manager app should be installed on the geofenced devices. More information about how Systems Manager approximates the location of a device can be found in this KB article: Location Approximation in Systems Manager
Multiple geofencing rules can exist, with each potentially covering multiple physical areas. This allows administrators to limit the scope of different sets of devices to different physical locations.
If configured, alerts can be sent to administrators whenever a device within the scope of a geofence remains outside of the designated boundary for more time than permitted by the grace period. To configure these alerts:
If an alert must be generated, based on the geofences defined and the selection made above, it will be sent to the address(es) indicated in the Delivery settings section of the page.
Once a geofence has been created and applied to devices, those devices will automatically receive one of two tags, dependent on whether they are within the geofence or not. These tags can be used to control the scope of profiles. The feature is only available with Systems Manager Enterprise.
Devices currently compliant: Device is currently inside a geofence that it is within the scope of, or it has not yet exceeded the grace period.
Devices currently violating: Device is not within any of its geofences and is beyond the grace period.
To make a profile dependent on device compliance:
In the screenshot below, only devices with the "corporate_devices" tag will receive this profile and only when they are within a geofence boundary. Once they leave the geofence and exceed the grace period, the profile will be removed from the device the next time it is unlocked and checks in. If the device is within the scope of multiple geofences, compliance takes priority and the device will be considered compliant as long as it is within at least one geofence boundary.
Note: The geofencing auto tags cannot be used with apps, due to how app association with accounts is handled.
It is also possible to manually check on devices to determine if they are currently within the geofence boundary or not. To do this:
To check the status of a specific client, as well as see which auto tag is currently applied:
Note: Auto tags based on geofence compliance are only available with Systems Manager Enterprise.
To delete an existing geofence:
To delete a boundary within a geofence: