Available Android task types

The following task types are available for Android task bundles:

Enroll

When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.

When the task is transferred to a device that is already enrolled, the task is skipped.

Enroll Sophos container

When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.

When the task is transferred to a device that is already enrolled, the task is skipped.

Assign policy

Select a policy. For information on how to add policies to this list, see Policies.

When the task is transferred to devices, the policy is silently assigned.

Uninstall policy

Under Select source, select Policies and then select a policy from the list.

In addition to the policies you’ve created in Sophos Mobile, the list includes all policies installed on a managed device.

You can also uninstall a policy that’s not listed if you know its identifier.

You can only uninstall Android device policies and Knox container policies. For other policy types, either update the policy, assign a different policy, or unenroll the device.

Install app

Select an app from the list of available apps. For information on how to add apps to this list, see Add app.

When the task is transferred to devices, users receive a notification on their devices that Sophos Mobile wants to install the app. Users can tap OK to start the process, or Not now to be notified again after a short period of time.

If users tap OK but then tap Cancel in the subsequent Android dialog, the task fails.

If the app is already installed on a device that receives the task, it is updated.

Install managed Google Play app

This task type is available if you have configured Android Enterprise for the customer.

Select an app from the list of managed Google Play apps you’ve approved for your organization. For information on how to add apps to this list, see Edit managed Google Play app.

The installation task is sent to a Google service. Google then manages the installation of the app onto the device. On the Task view page, the task is displayed with state successful when it has been sent to Google.

Alternatively, you can install apps from the Approved apps page. See Install managed Google Play app.

For information on how to uninstall an app from devices, see Uninstall a managed Google Play app.

Uninstall app

Under Select source, select Apps to select an app from the list of available apps.

In addition to the apps that are available on the Sophos Mobile server, the list includes apps that are in use on the managed devices - with the exception of Android system apps and apps that have been pre-installed by the device manufacturer.

You can also uninstall an app that is not contained in the list. Select Identifier and then enter the package name of the app you want to uninstall from devices. If you select Knox container app, the app will be uninstall from the Samsung Knox container.

When the task is transferred to devices, users receive a notification on their devices that Sophos Mobile wants to uninstall the app. Users can tap OK to start the process, or Not now to be notified again after a short period of time.

If users tap OK but then tap Cancel in the subsequent Android dialog, the task fails.

If the app is not installed on a device that receives the task, no notification is displayed.

Send message

Enter a plain text to be displayed on the devices.

When the task is transferred to devices, the message text is displayed in a notification window. Users can display past messages in the Sophos Mobile Control app.

Unenroll

When the task is transferred to devices, they are unenrolled from Sophos Mobile. See Unenroll devices. Device users do not need to confirm the operation.

You can’t add an Unenroll task and a Wipe task to the same task bundle.

Wipe

When the task is transferred to devices, they are reset to their factory settings. Device users do not need to confirm the operation.
CAUTION Use this task type with care. All data on the devices that receive the task is deleted without user confirmation.
Note When a Wipe task is transferred to an Android Enterprise work profile device, only the work profile and all managed Google Play apps are removed.

You can’t add an Unenroll task and a Wipe task to the same task bundle.

Knox container: lock

When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container is locked.

Knox container: unlock

When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container is unlocked.

Knox container: reset password

When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container password is reset. Users must set a new password to unlock the Knox container.

Knox container: remove

When the task is transferred to a Samsung device that supports Samsung Knox, the Knox container (including any container-related configuration) is removed.

Scan for malware

When the task is transferred to a device, Sophos Intercept X for Mobile scans it for malware and potentially unwanted apps (PUAs).

This task requires that Sophos Intercept X for Mobile is managed by Sophos Mobile.