automatically deply apps

Hi Corne Stoop 

The devices which are supervised devices can install the application silently without user interaction.

Please refer to this document which states the procedure of how you can install the application silently on the devices.

For the second query, application hardening is not available, however, you can define the mandatory apps in the compliance policy which should be installed on the device.

If that rule gets violated you can opt for alert option and you can also push the task bundle in order to re-install the application on the device. Please refer to this document.

Please let us know if you need more information on this.

Hi Corne Stoop 

The devices which are supervised devices can install the application silently without user interaction.

Please refer to this document which states the procedure of how you can install the application silently on the devices.

For the second query, application hardening is not available, however, you can define the mandatory apps in the compliance policy which should be installed on the device.

If that rule gets violated you can opt for alert option and you can also push the task bundle in order to re-install the application on the device. Please refer to this document.

Please let us know if you need more information on this.

Hi Jasmin,

I can transfer a task bundle manually but the user must do something on the device and i want to transfer the bundle when enrolling a new device automatically without user interaction, is this possible?

Secondly: i can see that the device is not compliant but is it possible to get an email when a device is not compliant because of some violation what we set?

Hi Corne Stoop 

You can create the task bundle for enrollment and then add the sequence for assigning policy and adding the apps. I will check with my team if this can be scheduled for a specific date, so no user interaction will be needed. 

For another query, you can Configure email alerts Email configuration tab.

1. On the menu sidebar, under SETTINGS, click Setup > General, and then click the Email configuration tab.
2. In Language, select the email language.
3. Click Save.

Kindly make sure you have configured email alert settings as per this article.

Another thing that is becoming a big problem is that almost every iphone we put in Sophos Central has a non compliant error after 2 days or something. When we deliver and sync a new IOS device it leaves us as compatible but after 1 day it already says not compatible on Sophos Central.

I have read a few things about it that it is not possible to make the control app on the phone to trigger a alert when it is not running, but can we force this on Sophos Central? It is not 1 device that smc is overdue but every device we have...

Hi Corne Stoop 

There might be multiple reasons behind the compatibility error on the iOS device. Ideal they should sync with Sophos central mobile 24 hours.

I'd suggest checking any of the devices which are showing the same error and see which rule is getting broken in the device.  

It is by all devices the same: SMC app synchronization overdueThe user must sync the Sophos Mobile Control app with the server. 

When the devices leave my desk and are compliant (synchronized control app) 1 -2 days later every device gives above compliant error. Thats why i asked to push or trigger the control app without user intervention..

Hi Corne Stoop 

Would you please provide the screenshot of the error and also please provide the screenshot of compliance status and violating rule information from the device?

Hi Corne Stoop 

Would you please check this article and make sure every setting is enabled for synchronization?