Available macOS task types

The following task types are available for macOS task bundles:

Enroll

When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.

When the task is transferred to a device that is already enrolled, no enrollment email is sent.

Assign device policy

Select a policy from the list of available macOS device policies. For information on how to add policies to this list, see Profiles and policies.

When the task is transferred to devices, the policy is silently assigned to the device. If a device policy is already assigned, it is replaced.

Assign user policy

Select a policy from the list of available macOS user policies. For information on how to add policies to this list, see Profiles and policies.

When the task is transferred to devices, the policy is silently assigned to the device. If a user policy is already assigned, it is replaced.

User policies are applied to users the next time they log in to the Mac.

Unenroll

When the task is transferred to devices, they are unenrolled from Sophos Mobile. See Unenroll devices. Device users do not need to confirm the operation.

You can’t add an Unenroll task and a Wipe task to the same task bundle.

Wipe

Set a 6-digit system lock PIN.

When the task is transferred to a Mac, macOS restarts and then begins wiping the disk. The user must enter the system lock PIN on the Mac to unlock it.

You can’t add an Unenroll task and a Wipe task to the same task bundle.

Important Use this task type with care. All data on the devices that receive the task is deleted without user confirmation.
Tip In Sophos Mobile Admin, the macOS system lock PIN is displayed on the device page under Device properties > Unlock passcode and on the Task details page under Lock PIN.