After some struggling we finally managed to get it working. So the steps
are like: Deploy Sophos KEXT ID to all Macs via a Configuration Profile
-> Approved Kernel Extensions2H5GFH3774 We took a script from this post
(https://www.jamf.com/jamf-nation...