Sophos Mobile Control
Knox container: remove
When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container
(including any container-related configuration) is removed.
If the task is transferred to a device that does not support Samsung Knox, the task fails.
Trigger SMSec scan
When the task is transferred to devices, the Sophos Mobile Security app is silently triggered to perform a scan against malware and potentially unwanted apps (PUAs).
This task requires that Sophos Mobile Security is managed from Sophos Mobile Control, that is,
a Mobile Security policy is assigned to the device. See Manage Sophos Mobile Security (page
205).
If Sophos Mobile Security is not managed by Sophos Mobile Control on a device that receives the task (that is, if a Mobile Security policy is not assigned to the device), the task remains in the state Will be retried.
15.3 Available iOS task types
The following task types are available for iOS task bundles:
Enroll
When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.
When the task is transferred to a device that is already enrolled, no enrollment email is sent.
Install profile or assign policy
Select a profile or policy from the list of available profiles and policies. For information on how to
add profiles or policies to this list, see Profiles and policies (page 69).
When the task is transferred to devices, the profile is silently installed or the policy is silently assigned.
You can add more than one task of this type to a task bundle.
Remove profile
In Select source, select Profiles and then select a profile from the list.
In addition to the profiles that are available on the Sophos Mobile Control server, the list includes profiles that are in use on the managed devices.
170
administrator help
You can also remove a profile that is not contained in the list. Select Identifier and then enter the identifier of the profile you want to remove from devices.
When the task is transferred to devices, the profile is silently removed.
You can add more than one task of this type to a task bundle.
Note: You cannot directly remove a Sophos container policy from devices. Instead, use the device action Unenroll Sophos container. This will also remove the related policy from the device.
Install provisioning profile
Select an app provisioning profile from the list of available profiles. For information on how to add
profiles to this list, see Import provisioning profiles for iOS apps (page 71).
When the task is transferred to devices, the provisioning profile is silently installed.
Remove provisioning profile
In Select source, select Profiles and then select a provisioning profile from the list.
In addition to the profiles that are available on the Sophos Mobile Control server, the list includes profiles that are in use on the managed devices.
You can also remove a provisioning profile that is not contained in the list. Select Identifier and then enter the identifier of the profile you want to remove from devices.
When the task is transferred to devices, the provisioning profile is silently removed.
Install app
Select an app from the list of all available apps. For information on how to add apps to this list, see
Add app (page 174).
When the task is transferred to devices, users receive a notification on their devices that Sophos
Mobile Control wants to install the app. Users can tap Install to start the process, or Cancel to reject the installation.
If users reject the installation, the task fails.
If the app is already installed on a device that receives the task, it is updated.
You can add more than one task of this type to a task bundle.
Remove app
In Select source, select Apps to select an app for removal from the list of available apps.
In addition to the apps that are available on the Sophos Mobile Control server, the list includes apps that are in use on the managed devices - with the exception of iOS system apps.
You can also remove an app that is not contained in the list. Select Identifier and then enter the bundle ID of the app you want to remove from devices.
171
