Skip to main content

August 21, 2026

Scheduler Settings

The Scheduler settings page lets you view the Workspace ONE UEM console scheduler tasks and configure the scheduler by setting the frequency with which they occur. You can also restrict individual tasks.

What can you do with the Scheduler settings page?

You can view the Workspace ONE UEM console scheduler tasks and configure the scheduler by setting the frequency with which they occur. You can also restrict individual tasks.

Scheduler TaskDescription
Admin Password Expiry NotificationDetermines how many days before an admin password expires to send an email notification.
Android Enterprise Migration Batch Release JobDuring Android (Legacy) migration to Android Enterprise, this task sends commands for the first batch size (300) of devices instantly. After the first 300 devices, the remaining devices will receive the command at the determined intervals. The default interval is 15 minutes.
Android Work Google Device Id Validation JobUpon enrollment into Android, the server waits for a Google generated deviceID, so that it can initiate the application assignment and push. There are a few minutes delay in getting this ID and this scheduler checks whether any new enrolled device has the ID updated and if yes, start the application sync process.
App Approval Request Cleanup JobSet how often the system cleans up outdated application approval requests submitted to Intelligence.
App EULA Update NotificationAccounts for all devices for which App EULA acceptance is pending and sends notifications. Once final notification is sent, app is removed from the device.
Application Configuration Migration JobSet how often the system moves application configuration files from the database to file storage, saving CPU cycles in the process.
Application Removal Protection JobSet the schedule to release admin approved application removal commands to devices.
Auto Renew Expiring ProfileChecks for certificates that expired within a renewal grace period configured on Certificate Authority and renews them.
Auto-rotate Google PasswordHandles password provisioning and purging for integration with Google Sync.
BitLocker Recovery Key Rotation JobRotates the BitLocker admin recovery key based on the values configured in the profile.
Check for macOS seeded apps upgradeSet the schedule that checks for updates to the Hub and other seeded macOS applications.
Command Publish Batch JobSet the schedule to release any previously held and batched commands.
Console NotificationsChecks to see if any new notifications must be added to an admin's notification list (for example, APNs expiration notification). These notifications appear in the admin console and are emailed to the admins.
Data Driven UI Configuration JobSet the schedule to fetch updated configuration files primarily used for profile management.
Device Based VPP Apps to Track UpdateChecks which VPP applications at an organization group have device-based licensing and auto update enabled. This adds or removes apps from the list used by the VPP auto update scheduler job.
Device Enrollment Program UpdateInitiates sync command from Apple to send the added and removed devices for a DEP token at a given OG to update our records.
Email Password RemovalRemoves Google password generated for email from Workspace ONE UEM database.
File Encryption MigrationEncrypts or decrypts the content stored in the file storage based on the settings in All Settings > Admin > Storage.
Hub Package Process RepositoryWatches the package repository directory for WinMo Hub packages and pulls them in to the database.
Install Application On Demand.Triggers install of Apple VPP applications upon VPP invite acceptance and triggers install of failed-eligible Apple VPP applications.
List View ExportChecks if an export is requested by an admin for the device or user list view. If it has, it schedules a background job to run asynchronously. Once that background job is completed, the list view export is available for download.
MDM Application List SampleCollects the status of applications that are marked as 'MDM apps' from all the devices. Applicable only for iOS apps and devices. Scheduler is turned off by default and is enabled only for customers who request the functionality.
MDM License Count UpdateChecks device enrollment counts and updates the customer's license counts. Used to track product usage.
Profile Publish Batch Job Profile publishes for CA and Tunnel profile queues the install profile command in held status is by Profile Publish Batch Job in batches. Selects a batch and batch size, based on the settings configured in the UEM Console (under Settings > Installation > Performance Tuning for on-premises environments).
Profile Retry Circuit BreakerThe amount of time the policy engine waits to retry failed device profile pushes.
Purge Job Removes orphan application blobs from the file storage, and CDN origin server if CDN is configured. Removes expired SDK application log files from the database. By default, the application log files expire every 14 days. Moves any application binary blobs to the file storage from the database if the file storage is configured. Moves non-expired SDK application log files from the database to file storage, if the file storage is configured. Global OG data does not get impacted with respect to the changes made to the blob purge. By default, the scheduler triggers every 24 hours and can either handle 2 GB of data from the database or actively perform tasks for 2 hours.
Purge Marked For DeleteThis job deletes repo(s)/folder(s)/file(s) under a repository that is marked for deletion.
Query Feedback ServiceChecks Apple's Feedback Service for statuses and causes of failed APNs commands.
Re-queue Device CommandsApplicable only for Windows devices. Identifies devices with failed application installs and re-tries installation. The number of re-try attempts and the interval for the next attempt are identified from the performance tuning settings 'Max re-try attempts for failed app install' and 'Failed Application Install Retry Interval' respectively.
Run Compliance Engine The scheduler job evaluates compliance in scenarios where:
  • Compliance policy is created Post-enrollment.
  • Any subsequent changes are made to the compliance policy.
  • Any changes made to smart group
  • Device moves organization groups
  • Changes made to app groups
  • Certain Telecom based compliance policies are enabled
  • Apple Templates are used
S/MIME Certificate CleanupChecks for all SMIME certificates that have completed their retention period and purges them.
Schedule OS Update Retry JobSchedule timing for installation retries for operating system updates in case initial attempt fails.
Scheduled Application Batch ReleaseUsed to release internal application install commands created and held by 'Scheduled Application Publish' job. Selects queued application batch (roundrobin). Calculates device list using configured 'Batch Size' text box of performance tuning section. Releases install commands for batch.
Scheduled Application PublishUsed to trigger the installation and removal of internal applications based on newly effective assignments. Creates held batch of install commands. Creates remove commands for the immediate release.
Seed System Apps and Push to CDN JobSchedule timing for pushing system applications from apps and books to content delivery networks.
Send Apps to App Scan Vendor.Send a unique list of applications installed across entire device fleet to the configured app scan vendor.
Send VPP Invites and AppsChecks for users assigned user-based VPP apps and either sends email or device notifications inviting users or devices to participate in user-based licenses of the Volume Purchase Program.
Server Action TaskHandles Time Schedule profiles. The job runs at configured intervals and takes action of Install or Remove profile as per the time span configured for Time schedule profiles.
Skeleton Profile Generation JobSet the timing for making skeleton profiles resulting from the use of escrowed credentials in device profiles. This skeleton profile ensures that when escrowed credentials are used and the normal profile flow is not invoked, the profile install status for all relevant devices is still accounted for.
Smart Group DeviceMap Cleanup JobTiming for automated cleanup of redundant and outdated device map data from smart groups.
Staged Command Data Processing JobUsed to schedule the processing of bulk commands from the Device List View page.
Sync Chrome OS DevicesRetrieves new Chrome OS enrollments from Google and creates a corresponding device record in Workspace ONE UEM.
Sync Directory GroupsQueries the directory to grab all members of synchronized directory groups. Stores users who are part of the group in the UserGroupEnrollmentUserMapSync table. Compares those users by Distinguished Name (DN) or other unique attribute in the UserGroupEnrollmentUserMapSync table to the Mobilemanagement.EnrollmentUser table. If group is configured with add missing users enabled and User does not exist with that DN, user details are pulled from the AD using user ExternalID and stored in the Mobilemanagement.EnrollmentUser table.
Sync Directory User and Admin AttributesQueries the directory to sync user attributes based on eternalID.
Sync External ContentSyncs admin repo metadata for all the repositories where admin user credentials are set in the MCM console.
Sync MEM Device Resource ID JobSyncs Google device records with Workspace ONE UEM for approving new enrollments / mobile mail configurations
Telecom Assign Plans/Roll-up UsageCalculate usage limits for devices whose Admin has enabled Telecom tracking. Necessary to run reports, populate dashboard, and have the accurate list-view for Telecom.
Temporary Session Key Clean UpClears temporary encryption keys used to encrypt the admin provided passphrase in a downloaded configuration file. The key is removed from the database so that it is impossible to retrieve the passphrase from the configuration file after the 48-hour key rotation window has passed.
VPP Auto UpdateChecks iTunes for latest version of VPP applications from the list created by Device Based VPP Apps to Track Update job. Each app is checked once every 24 hours. If an update is available, the job kicks off the update command to assigned devices.
VPP Externally Redeemed License CleanupRemediates Apple VPP licenses that are marked as Externally Redeemed.
VPP Revoke LicensesChecks for users with associated licenses but no corresponding assigned application. It then issues a revoke command of the license from the user to disassociate it from the license so it can be reused.
Windows Provisioning Package Service Processor JobTiming for PPKG processing. The more provisioning packages you have and the larger they are, the longer you should set this timing.
Windows 10 Kiosk Publishing Processor JobTiming in hours for kiosk package processing. The more kiosk packages you have and the larger they are, the longer you should set this timing.
Workflow ServiceUsed with the App store restriction, if the restriction is enabled then only one app workflow is active at a time. If there is any issue with the application installation, it deletes in 15 minutes and next one starts.

Was this page helpful?

Provide feedback for this topic

Was this topic helpful?

Please do not include any personal or confidential information.

Generating link…