Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/Mobile/help/en-us/index.html?contextId=unenroll

Unenroll devices

You can unenroll devices that are no longer in use, for example when a user gets a new device.

Note

When you delete a device that's still enrolled with Sophos Mobile, it unenrolls itself the next time it synchronizes with Sophos Mobile. However, this doesn't apply to Windows computers. When you delete an enrolled Windows computer, you must manually unenroll it, or reset it to its factory settings if Forbid manual MDM unenrollment is turned on in the device policy.

Android Enterprise fully managed devices

To unenroll an Android Enterprise fully managed device, you must reset it to its factory settings. See Wipe device.

Android Enterprise work profile devices

To unenroll an Android Enterprise work profile device, remove the work profile:

  1. On the menu sidebar, click Devices.
  2. Select the Android Enterprise work profile devices you want to unenroll.
  3. Click Actions > Wipe Android work profile.
  4. Click Yes in the confirmation dialog.

For information on deleting the work profile from a device that can’t access the Sophos Mobile server, see Google’s help on work profiles. Do this, for example, if you enrolled the device in a trial that’s now expired.

Other devices

To unenroll a non-Android device or an Android device in device administrator management mode, do as follows:

  1. On the menu sidebar, click Devices.
  2. Select the devices you want to unenroll.
  3. Click Actions > Unenroll.
  4. Click Yes in the confirmation dialog.

Unenrollment consequences

Android Enterprise fully managed devices

  • The device is reset to its factory settings.

Android Enterprise work profile devices

  • All apps and data inside the work profile are deleted.
  • The work profile is removed from the device.

Note

If you registered your organization with Android Enterprise in Managed Google Play Account mode, users can only enroll a limited number of devices. In some situations, the Google account might remain on the device after unenrollment, and the device still counts as enrolled. If this happens, manually remove the Google account from the device.

Android devices enrolled in device administrator management mode

  • The Sophos Mobile Control device administrator is disabled.
  • The server login data and all other data received are removed.
  • Sophos Intercept X for Mobile is reset.

iPhones and iPads

  • All policies are removed.
  • All managed apps are uninstalled.
  • All certificates received through Mobile Device Management are removed.
  • Sophos Intercept X for Mobile is reset.

Macs

  • All policies are removed.
  • All certificates received through Mobile Device Management are removed.