you will be able to push profles to dedicated devices via /Profiles/iOS/ click the dropdown on the profile and click on "transfer" or something like that (got another language) and you will be able to select your devices which you want to update.
For example, in one Profile you can include more than one option/property (Mail,VPN etc). So if you change your Profile_1 which has only mail and you add VPN to this Profile, than Sophos will update the Profile not the Option/Property of this Profile. Therfore it's wise to define the requirements before you create a profile to got one complete profile-package. I advice you to create one complete package for the future (for your department or whatever) and additionally one single VPN-profile for your purpose.
- in this profile i have - password policy -Roaming - WLAN -Restrictions (limitations) - Exchange Active Sync
- When i want to change in that profile one setting in -Restrictions and only want to sync that one setting --> that is not possible (as i tested right now)
- When i push that profile now to a client which has the Version 1.0 and now i push 2.0 the whole profile will be pushed and Exchange Active Sync is completely new installed (all Mails will be synced again).
My questions is if there is no opportunity to only Push the Profile-Changes?
Or do i have to make for every Configuration a seperate Profile to go sure for changes in the future.
I understood what you want to do on the first attempt.
Like i said, If you got a Profile (with more than one Option) and you change one option inside that Profile you will not able (at least, at the moment) to push the single change inside that profile.
If you want to push one single change, create a new Profile, with this one single change and push it to the dedicated devices.
-Or do i have to make for every Configuration a seperate Profile to go sure for changes in the future.-
--> no it's not mandatory to do it like this. For the future I will recommend to define profiles with more than one option before you enroll it. Think about what you will need for the dedicated device to avoid critical changes in the future
For example: I have single Profiles for company mailboxes or VPN-Settings sorted by department. I do not know your setup and whats the best pratice in your workspace, but I think you get it what i mean.
Due it's limitation, it is not possible to push single changes inside a profile to dedicated devices yet!
as Mathias said, only pushing the changes within a profile is not possible. This is a limitation within the iOS operating system, as a profile is one single file and treated as such by iOS.
Therefore, I recommend to separate configurations which won't change in the future like Email or VPN into separate profiles.
