While the scoping options are nice there is no easy way to exclude something like a policy from a configuration profile. Anytime a new device is being enrolled, I have to disable a configuration profile that triggers if a blacklist app is installed because if I don't, the device immediately hits the policy as a violation and it pops into that group - it seems that once the user enters the home screen after enrollment, policy compliance isn't yet taken.
Adding the enrollment policy (it tells if a new device was enrolled because it only has *apple* apps and the *meraki* app) as an exclusion to the blacklist app restrictions would fix this problem.
I know we spoke about something similar a few weeks ago, and hoping this could be added soon!
Find this helpful? Click the kudos button. Thanks!
