Hello, here is the scenario: We are pushing out a new version of a in-house app soon but we want to make sure that the end users don't use the old version of that app once the new version is deployed. This is more of a failsafe as the app should auto update for everyone but in the event it doesn't update for someone, we could block the user from opening that specific old version of the app. My plan was to restrict the app in a config profile then scope it to a smart group of users who have the old version. When the app updates to the new version, they would be removed from that smart group and would be able to use the app. 

My problem is the smart group criteria, it doesn't seem to work. The results always show 0 devices. It should show around 200 devices. This is what I'm trying:

I even tried changing the "App Name" to "App Identifier" but I get the same results. Let me know what I could be doing wrong or if there is a better solution for this scenario. It's possible my plan here won't even work but can't test it... Thanks!