Conflicting Configuration Profile Restrictions - What Wins?

[timbrownell]

If I have multiple configuration profiles made by different techs and as an example: profile 1 - allows iMessage and profile 2 does NOT allow iMessage, which profile wins? Is iMessage allowed or not?

[mm2270]

Not allowed wins. Apple's guideline on this is very clear. The more restrictive profile will win. This is actually answered on this thread here

In general though, its not a great idea to have conflicting profiles applied to a device. In some cases, odd behavior can occur.

[davidacland]

There used to be a bit more flexibility with Workgroup Manager and MCX with settings coming from multiple directions being reasonably well "merged". Since using profiles, we always avoid any kind of overlap. In some cases the most restrictive has won. In other cases, none of the settings seem to apply.

[foreverkan]

I have a simillar question.

I have a restricition profile for every client.(not allowed icloud, imessage, usb storage etc....)

But some client wants to insert usb storage for their job.

How can i split usb storage block and other not allowed feature.