I have this covered in 2 ways. I have a set of policies that runs
imediately after enrollment that is pointed at a smart group called "New
Devices". This smart group is comprised of devices enrolled less than 3
days ago, which gives me a little leewa...
