Having issues getting scope correct on a OSX Configuration Profile.
I have a Configuration Profile I want to assign to "student machines" - pretty locked down with various restrictions. However, I don't want those restrictions present if an Admin logs in.
I would have hoped that I could scope to All Computers (or at least a computer group) and then set an exclusion, but I can't seem to exclude AD Groups (it doesn't show AD Groups).
Is there a way to do this? Am I doing it wrong?
JSS 9.92, OSX 10.11.6