Sophos Secure Mail is locked even with compliant Phone

As the title suggests, many of our work phones are locked, even if the device is compliant with our policies. Previously, it was enough to reset the User's password.

But now it stays locked. Even reinstalling Secure Mail doesn't seem to work.

Anyone got a Solution or an Idea how to fix this?