Smart Group Hierarchy

[JeremyGood]

Scenario: You have two smart-groups that have some overlap, and you use those groups to assign some policies. If the policies conflict, which takes precedence? Is there a hierarchy to the way JAMF decides which policies to apply?

For example:

Group A & B contain some of the same computers.
Group A has the policy to hide the doc, group B does not. Which one takes affect?

[Hugonaut]

To the best of my knowledge if a computer is in a group that is assigned a policy, regardless of what other groups it is in, the computer is going to receive the policy.

In your scenario, the doc is going to be hidden.

You would need create an exclusion list for the policy the hides the package. If its a lot of computers that have it, maybe create a smart group to filter out computers, lots of ways to skin this cat.

Just a quick rough example of a work around for deductive reasoning purposes.

[JeremyGood]

Thanks Hugonaut. That is kind of what we have. The problem is that when you get many smart groups and many policies, it can be hard to keep strait. Also, if you add another smart group you have to go back and add another exception to the other groups in some situations. Recently we got bit by creating a new smart group that had no one assigned and no policies, which then removed polices that were on computers in our "default" group. There is a feature request of "Make smart groups with no criteria contain no machines" which is exactly what happened. I was hoping there was a way to make a smart group or policy take priority. I come from the Microsoft world where you can easily do that in Group Policy and I was surprised that it doesn't seem to work that way in Jamf.