Unenroll devices

You can unenroll devices that will no longer be used, for example when a user gets a new device. This is useful if you have limited the number of devices a user can enroll in the Sophos Central Self Service portal.

  1. On the menu sidebar, under MANAGE, click Devices.
  2. Select the desired device, click Actions and then click Unenroll.

    A message is displayed prompting you to confirm that you want to unenroll the device.

    Note It is possible to select several devices for unenrollment.
  3. Click Yes.
The device is unenrolled. This results in the following:
  • Android devices:
    • The Sophos Mobile Control device administrator is disabled.
    • The server login data and all other data received are removed.
    • The container apps (Sophos Secure Workspace and Sophos Secure Email) and Sophos Intercept X for Mobile are reset.
  • iPhones and iPads:
    • All policies are removed.
    • All managed apps are uninstalled.
    • All certificates received through Mobile Device Management are removed.
    • The container apps (Sophos Secure Workspace and Sophos Secure Email) and Sophos Intercept X for Mobile are reset.
  • Macs:
    • All policies are removed.
    • All certificates received through Mobile Device Management are removed.
Note
  • When users disable the Sophos Mobile Control device administrator on Android devices, the Sophos Mobile Control app unenrolls the device.
  • To unenroll an Android Enterprise fully managed device, you must wipe it.
  • If you’ve set up Android Enterprise for the Managed Google Play Account scenario, users can only enroll a limited number of devices. In some situations, the Google account might remain on the device after unenrollment and the device still counts as enrolled. If this happens, manually remove the Google account from the device.