AD Group for Devices
Use Active Directory Groups for Devices, similar to User Policies.
Currently we can assign a policy using a User Group, but the same cannot be done for devices. This is a problem in situations where you want the policy to be applied for devices in a specific AD Group.
Without this feature, we have to manually add devices into either a Sophos Central Device Group or into the policy.
In my situation, I have over 500 machines to add to a specific policy. I now have to maintain this list manually daily, remove devices that no longer apply to the policy, and add new machines that do apply as they get Sophos Central Agent installed.
This has turned a simple project into a major daily task for the foreseeable future that will take me about 3 hours a day to maintain.