Available Android task types

The following task types are available for Android task bundles:

Enroll

When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.

When the task is transferred to a device that is already enrolled, no enrollment email is sent.

Install profile or assign policy

Select a profile or policy from the list of available profiles and policies. For information on how to add profiles or policies to this list, see Profiles and policies.

When the task is transferred to devices, the profile is silently installed or the policy is silently assigned.

You can add more than one task of this type to a task bundle.

Remove profile

In Select source, select Profiles and then select a profile from the list.

In addition to the profiles that are available on the Sophos Mobile Control server, the list includes profiles that are in use on the managed devices.

You can also remove a profile that is not contained in the list. Select Identifier and then enter the identifier of the profile you want to remove from devices.

When the task is transferred to devices, the profile is silently removed.

You can add more than one task of this type to a task bundle.

Note: You cannot directly remove a Sophos container policy or a Mobile Security policy from devices. Instead, use the device action Unenroll Sophos container or Unenroll SMSec. This will also remove the related policies from the device.

Install app

Select an app from the list of all available apps. For information on how to add apps to this list, see Add app.

When the task is transferred to devices, users receive a notification on their devices that Sophos Mobile Control wants to install the app. Users can tap OK to start the process, or Not now to be notified again after a short period of time.

If users tap OK but then tap Cancel in the subsequent Android dialog, the task fails.

If the app is already installed on a device that receives the task, it is updated.

You can add more than one task of this type to a task bundle.

Install Android for Work app

This task type is available if you have configured Android for Work for the customer.

Select an app from list of all available work apps. For information how to add apps to this list, see Edit work app.

The installation task is sent to a Google service. Google then manages the installation of the app onto the device. On the Task view page, the state of the task is successful when it has been sent to Google.

You can add more than one task of this type to a task bundle.

Alternatively, you can install work apps from the Android for Work apps page. See Install work app.

For information how to uninstall a work app from devices, see Uninstall work app.

Remove app

In Select source, select Apps to select an app for removal from the list of available apps.

In addition to the apps that are available on the Sophos Mobile Control server, the list includes apps that are in use on the managed devices - with the exception of Android system apps and apps that have been pre-installed by the device manufacturer.

You can also remove an app that is not contained in the list. Select Identifier and then enter the package name of the app you want to remove from devices. If you select Knox container app, the app will be removed from the Samsung Knox container.

When the task is transferred to devices, users receive a notification on their devices that Sophos Mobile Control wants to remove the app. Users can tap OK to start the process, or Not now to be notified again after a short period of time.

If users tap OK but then tap Cancel in the subsequent Android dialog, the task fails.

If the app is not installed on a device that receives the task, no notification is displayed.

You can add more than one task of this type to a task bundle.

Send message

Enter a plain text to be displayed on the devices.

When the task is transferred to devices, the message text is displayed in a notification window. Users can display past messages on the Messages page of the Sophos Mobile Control app.

You can add more than one task of this type to a task bundle.

Unenroll

When the task is transferred to devices, they are unenrolled from Sophos Mobile Control. See Unenroll devices. Device users do not need to confirm the operation.

You cannot add an Unenroll and a Wipe task to the same task bundle.

Wipe

When the task is transferred to devices, they are reset to their factory settings. Device users do not need to confirm the operation.
Important: Use this task type with care. All data on the devices that receive the task is deleted without user confirmation.
Note: When a Wipe task is transferred to a device that is enrolled with Android for Work, only the work profile and all work apps are removed.

You cannot add an Unenroll and a Wipe task to the same task bundle.

Knox container: lock

When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container is locked.

If the task is transferred to a device that does not support Samsung Knox, the task fails.

Knox container: unlock

When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container is unlocked.

If the task is transferred to a device that does not support Samsung Knox, the task fails.

Knox container: reset password

When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container password is reset. Users must set a new password to unlock the Knox container.

If the task is transferred to a device that does not support Samsung Knox, the task fails.

Knox container: remove

When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container (including any container-related configuration) is removed.

If the task is transferred to a device that does not support Samsung Knox, the task fails.

Trigger SMSec scan

When the task is transferred to devices, the Sophos Mobile Security app is silently triggered to perform a scan against malware and potentially unwanted apps (PUAs).

This task requires that Sophos Mobile Security is managed from Sophos Mobile Control, that is, a Mobile Security policy is assigned to the device. See Manage Sophos Mobile Security.

If Sophos Mobile Security is not managed by Sophos Mobile Control on a device that receives the task (that is, if a Mobile Security policy is not assigned to the device), the task remains in the state Will be retried.