Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/Mobile/help/en-us/index.html?contextId=task-types-mac

Task types (macOS)

This page shows the task types available for macOS task bundles.

Enroll

When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.

When the task is transferred to a device that is already enrolled, the task is skipped.

Assign device policy

Select a policy from the list of available macOS device policies. For information on how to add policies to this list, see Policies.

When the task is transferred to devices, the policy is silently assigned to the device. If a device policy is already assigned, it is replaced.

Assign user policy

Select a policy from the list of available macOS user policies. For information on how to add policies to this list, see Policies.

When the task is transferred to devices, the policy is silently assigned to the device. If a user policy is already assigned, it is replaced.

User policies are applied to users the next time they log in to the Mac.

Install app

Select an app from the list of available apps. For information on how to add apps to this list, see Add app.

When the task is transferred to devices, the app is silently installed.

PKG package files might contain several apps. In this case, all apps are installed.

Note

A Successful task state means the device has started to download the app. To verify that the app was installed successfully, synchronize the device and check the list of installed apps on the device details page.

Unassign VPP app

Select an app from the list of available Apple Business Manager apps.

When the task is transferred to devices, the app license is removed from devices that have it assigned.

Users can continue to use the app for 30 days.

Unenroll

When the task is transferred to devices, they are unenrolled from Sophos Mobile. See Unenroll devices. Device users do not need to confirm the operation.

You can’t add an Unenroll task and a Wipe task to the same task bundle.

Wipe

Set a 6-digit system lock PIN.

When the task is transferred to a Mac, it restarts and then begins wiping the disk. The user must enter the system lock PIN on the Mac to unlock it.

You can’t add an Unenroll task and a Wipe task to the same task bundle.

Warning

Use this task type with care. All data on the devices that receive the task is deleted without user confirmation.

Tip

You find the macOS system lock PIN on the device page under Device properties > Unlock passcode and on the Task details page under Lock PIN.