Hi,
We have a compliance policy which is designed to prevent certain profiles deploying until the required apps are installed on to a device, i.e. the Intelligent Hub. Once the required apps are deployed we then deploy some additional profiles. This has previously worked fine but we have recently upgrade the WS1 platform, along with upgrading the Apple iOS version of the devices.
What we see now is that after enrolment some devices immediately get the profiles which should be blocked based on the compliance policy as the required apps have yet to be installed, however as the compliance policy is pending a sample it allows the profile to install and doesn't show the profiles as blocked.
I suppose my question is what should occur with a compliance policy which has yet to be evaluated post enrolment, should it fail into a block state or not? This appeared to be the case previously, but this seems to have changed, although it seems 50/50 to which way it occurs during an enrolment.
Any thoughts?
