This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Schedule a task for the future

Hello, is there a way to schedule a task to run in the future?  The end goal is to remove the SMC Exchange Profile at a certain time.  We require our employees to remove their work email from their mobile devices when getting ready to re-enter the USA.  Per the new rules, Customs can require you to open your mobile device and they can download the data if requested.  If the user refuses, then they can be help upwards of 18 hours to force you to open it.  They can also seize the device and send it back later if you refuse to unlock the phone.  If any of our users fail to remove exchange mail, and they hand the device over unlocked, that would count as a breach.  That user will be fired, and our clients would get a concerning letter stating their data may or may not be in government hands.   That's not an option.  

Currently, we are manually purging the SMC exchange profile ahead of their scheduled departure.  This requires us to set up mail the "old way" via exchange active sync.  The user then manually deletes the exchange account when entering the USA, then sets back up the old way after they cross. This requires IT intervention before they leave, and after they return.   I looked into Geo fencing, but SMC seems to only enable features when inside a "zone".  And I would also have to geo-tag every point of entry in the USA, not possible.

This brings me to scheduled task.  I would like to have the ability to remove the exchange profile at a certain time, then push it back to the device at a scheduled time.  We know the approximate time the user plans to reenter.   So we would push a task- delete Exchange Profile.  The mail account is then removed along with any data it once had.  (simply disabling mail sync doesn't purge the emails, we need them gone.)   We would then schedule the SMC Exchange Profile to install shortly after the removal ( 1 hour).  If the user isn't through Customs by that time, then the user simply won't enter their work password until they are safe in the USA.  This would satisfy Loss Prevention, and it would require little interaction with the user.  Currently, this is a pain to manage.  Does anyone else have a better idea, or know how to schedule a task in the future?  Thank you.  



This thread was automatically locked due to age.
Parents
  • I received this answer from Sophos Support.  Scheduling a task is not possible.  They recommend creating a feature request via the link below.  Please take a moment and let support know you want this feature.   

     

    Hello Bryan,

    Thank you for contacting Sophos Technical Support. After going through your email, I did ask around to some of our senior resources for MDM. Unfortunately there currently isn't a way to schedule a task to purge an exchange account off a device.

    That said, given the recent changes I do agree that would be a valued feature to Sophos Mobile. To that end, I do strongly encourage you to create a feature request at the following site. https://www.sophos.com/en-us/support/feature-requests.aspx

    Regards,

    Rober

  • Not sure if this is what you want but this is a scenario i have used and worked fine,.

    exchange config is installed via MDM

    you can then goto profiles - Uninstall - select your device and click next - choose the exchange profile to remove and click next.

    at the top of the screen where is says schedule, choose date and then select the date and time in the future you want the task to run.

    you just need to make sure the exchange account config is added via MDM if you want MDM to remove it. if its manually configured on the device then your stuck.

    screen shot below.

  • YES!!!  This is what we were looking for!  I tried this process, and it works!  Thank you for sharing!  

Reply Children