A first wireless end-user device is designated as subject to controls under a device group authorization from a master wireless end-user device. The first device receives a protection management profile from the master device, and compares settings in the profile to a device location change state (e.g., speed) and a device user I/O method state (e.g., touchscreen, hands-free, Bluetooth, voice-activated, etc.). According to the profile, at certain speeds and I/O methods, one or more device service and/or network activities are limited. The master device may send multiple such profiles to the first device, any of which if applicable can limit different service and/or network activities in different situations.