I am mostly writing this here so I can find it again in the future,
because I have to do this again every few years... But if this helps
others - or if you know why this will break in the future - let me know.
Create a new policy, go into Files and P...
I modified DerFlounder's script and have been using it for High Sierra.
Don't know yet if it will work for Mojave. Main difference is I'm
mapping OD groups to the local ARD groups and using my OD to manage
users in the ARD groups. I assume this would...
I've found what is working for me, don't know if it will keep working.
I'm using a Comodo wildcard, so I'm sending the .ca-bundle as well (had
to change the extension to .cer for it to upload). It shows up as