Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=unenroll-mobile-device

Unenroll device

You can unenroll a device from Sophos Mobile to stop managing it. For example, you can unenroll a device when a user gets a new one.

Warning

When you delete a device from Sophos Mobile that's still enrolled, Sophos Mobile will unenroll it. However, this doesn't apply to Windows computers. For information on the consequences of unenrollment, see Unenrollment consequences.

Android Enterprise fully managed device

To unenroll an Android Enterprise device in full device management mode, use the Wipe action to reset it to its factory settings. See Wipe device.

Android Enterprise work profile device

To unenroll an Android Enterprise device in work profile management mode, use the Wipe action to remove the work profile. See Wipe device.

Do as follows:

  1. Go to Devices > Mobile devices and click the name of the Android Enterprise work profile device you want to unenroll.
  2. On the device's details page, click Actions > Wipe.
  3. In the confirmation dialog, click OK.

For information on deleting the work profile from a device that can't connect to Sophos Mobile, see Google's help on work profiles. Do this, for example, if you enrolled the device in a trial that's now expired.

Other device

To unenroll a non-Android device or an Android device in device administrator management mode, do as follows:

  1. Go to Devices > Mobile devices and click the name of the device you want to unenroll.
  2. On the device's details page, click Actions > Unenroll.
  3. In the confirmation dialog, click OK.

Unenrollment consequences

The following sections tell you what happens when you unenroll a device from Sophos Mobile.

Android Enterprise fully managed device

  • The device is reset to its factory settings.

Android Enterprise work profile device

  • All apps and data inside the work profile are deleted.
  • The work profile is removed from the device.

Note

If you registered your organization with Android Enterprise in Managed Google Play Account mode, users can only enroll a limited number of devices. In some situations, the Google account might remain on the device after unenrollment, and the device still counts as enrolled. If this happens, manually remove the Google account from the device.

Android device in device administrator management mode

  • The Sophos Mobile Control device administrator is disabled.
  • The server login data and all other data received are removed.
  • Sophos Intercept X for Mobile is reset.

iPhone or iPad

  • All policies are removed.
  • All managed apps are uninstalled.
  • All certificates received through Mobile Device Management are removed.
  • Sophos Intercept X for Mobile is reset.

Mac

  • All policies are removed.
  • All certificates received through Mobile Device Management are removed.