If I have two policies applying to the same target. One allows and one denies, which one wins?
Config files for each settings type are processed in alphabetical order, and the last one wins.
View solution in original post
Thanks for the clarification. Sounds like we need an Enforce checkbox that overrides all policies.