In my company policies push out and run fine and self service policies work fine as well.
Config Profiles however do not install until the mac is connected to an external network with no filtering.
Is there something different to the network packets in how policies and configs are pulled down?
