Hello. What would be the best way to accomplish the following:
-Restrict external media to Read Only(configuration profile I assume).
-ONLY deploy the above config profile to NEW machines(new deployments)
I was thinking create a static computer group for existing machines and then exclude that group in the config profile?
