Conflicting Configuration Profile Restrictions - What Wins?

New Contributor II

If I have multiple configuration profiles made by different techs and as an example: profile 1 - allows iMessage and profile 2 does NOT allow iMessage, which profile wins? Is iMessage allowed or not?


Legendary Contributor III

Not allowed wins. Apple's guideline on this is very clear. The more restrictive profile will win. This is actually answered on this thread here

In general though, its not a great idea to have conflicting profiles applied to a device. In some cases, odd behavior can occur.

Honored Contributor II
Honored Contributor II

There used to be a bit more flexibility with Workgroup Manager and MCX with settings coming from multiple directions being reasonably well "merged". Since using profiles, we always avoid any kind of overlap. In some cases the most restrictive has won. In other cases, none of the settings seem to apply.