Windows Location Privacy Registry Keys Explained
This guide explains the exact Windows Registry keys responsible for controlling the system-wide location privacy platform across modern versions of Windows. Modifying these registry values allows administrators to enable, disable, or enforce location access across the entire operating system, background services, and installed applications without using the standard Settings UI.
The Master System-Wide Location Key
In Windows 10 and Windows 11, the primary system-wide master switch for location access is managed by the Capability Access Manager. The registry key is located at:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location
Inside this key, the core value that dictates global access is:
- Value Name:
Value - Type:
REG_SZ(String) - Settings:
Allow– Enables system-wide location services for the device.Deny– Disables system-wide location services for the device.
The Geolocation Service Configuration Key
The underlying Windows Location Framework Service
(lfsvc) also contains an operational master state key
within the system service registry hive:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration
Within this key, the master operational switch is:
- Value Name:
Status - Type:
REG_DWORD - Settings:
1– Location service is active/enabled.0– Location service is stopped/disabled.
The Group Policy Override Key
To enforce location privacy policies across all users and prevent local modification, Windows relies on the policy hive:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors
The master policy switch is:
- Value Name:
DisableLocation - Type:
REG_DWORD - Settings:
1– Completely turns off and locks the location platform for all users.0(or deleted) – Allows standard location services to operate according to the user or system settings.
How to Apply Changes
- Press
Win + R, typeregedit, and press Enter. - Navigate to the desired key listed above.
- Double-click the target value to adjust the data
(
Allow/Denyor0/1). - Restart the computer or restart the Geolocation
Service (
lfsvc) viaservices.mscfor the changes to take effect immediately.