Sophos Mobile Control (in Sophos Central)
10. After you have added all required tasks to the task bundle, click Save on the Edit task bundle page.
The task bundle is available for transfer. It is displayed on the Task bundles page.
Note: When you edit an existing task bundle which is used as Initial package in the Self Service
Portal settings, the enrollment task cannot be deleted. See Configure Self Service Portal settings
(page 16).
13.2 Available Android task types
The following task types are available for Android task bundles:
Enroll
When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.
When the task is transferred to a device that is already enrolled, no enrollment email is sent.
Install profile or assign policy
Select a profile or policy from the list of available profiles and policies. For information on how to
add profiles or policies to this list, see Profiles and policies (page 52).
When the task is transferred to devices, the profile is silently installed or the policy is silently assigned.
You can add more than one task of this type to a task bundle.
Remove profile
In Select source, select Profiles and then select a profile from the list.
In addition to the profiles that are available on the Sophos Mobile Control server, the list includes profiles that are in use on the managed devices.
You can also remove a profile that is not contained in the list. Select Identifier and then enter the identifier of the profile you want to remove from devices.
When the task is transferred to devices, the profile is silently removed.
You can add more than one task of this type to a task bundle.
Note: You cannot directly remove a Sophos container policy or a Mobile Security policy from devices. Instead, use the device action Unenroll Sophos container or Unenroll SMSec. This will also remove the related policies from the device.
150
administrator help
Install app
Select an app from the list of all available apps. For information on how to add apps to this list, see
Add app (page 157).
When the task is transferred to devices, users receive a notification on their devices that Sophos
Mobile Control wants to install the app. Users can tap OK to start the process, or Not now to be notified again after a short period of time.
If users tap OK but then tap Cancel in the subsequent Android dialog, the task fails.
If the app is already installed on a device that receives the task, it is updated.
You can add more than one task of this type to a task bundle.
Install Android for Work app
This task type is available if you have configured Android for Work for the customer.
Select an app from list of all available work apps. For information how to add apps to this list, see
Edit work app (page 178).
The installation task is sent to a Google service. Google then manages the installation of the app onto the device. On the Task view page, the state of the task is successful when it has been sent to Google.
You can add more than one task of this type to a task bundle.
Alternatively, you can install work apps from the Android for Work apps page. See Install work app (page 180).
For information how to uninstall a work app from devices, see Uninstall work app (page 181).
Remove app
In Select source, select Apps to select an app for removal from the list of available apps.
In addition to the apps that are available on the Sophos Mobile Control server, the list includes apps that are in use on the managed devices - with the exception of Android system apps and apps that have been pre-installed by the device manufacturer.
You can also remove an app that is not contained in the list. Select Identifier and then enter the package name of the app you want to remove from devices. If you select Knox container app, the app will be removed from the Samsung Knox container.
When the task is transferred to devices, users receive a notification on their devices that Sophos
Mobile Control wants to remove the app. Users can tap OK to start the process, or Not now to be notified again after a short period of time.
If users tap OK but then tap Cancel in the subsequent Android dialog, the task fails.
If the app is not installed on a device that receives the task, no notification is displayed.
You can add more than one task of this type to a task bundle.
151
Sophos Mobile Control (in Sophos Central)
Send message
Enter a plain text to be displayed on the devices.
When the task is transferred to devices, the message text is displayed in a notification window.
Users can display past messages on the Messages page of the Sophos Mobile Control app.
You can add more than one task of this type to a task bundle.
Unenroll
When the task is transferred to devices, they are unenrolled from Sophos Mobile Control. See
Unenroll devices (page 38). Device users do not need to confirm the operation.
You cannot add an Unenroll and a Wipe task to the same task bundle.
Wipe
When the task is transferred to devices, they are reset to their factory settings. Device users do not need to confirm the operation.
Important: Use this task type with care. All data on the devices that receive the task is deleted without user confirmation.
Note: When a Wipe task is transferred to a device that is enrolled with Android for Work, only the work profile and all work apps are removed.
You cannot add an Unenroll and a Wipe task to the same task bundle.
Knox container: lock
When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container is locked.
If the task is transferred to a device that does not support Samsung Knox, the task fails.
Knox container: unlock
When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container is unlocked.
If the task is transferred to a device that does not support Samsung Knox, the task fails.
Knox container: reset password
When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container password is reset. Users must set a new password to unlock the Knox container.
If the task is transferred to a device that does not support Samsung Knox, the task fails.
152
