WGM migrate to Profile Manager

[NickDay85]

Hello,

 

Currently running a full Mac environment which are all running 10.8 connected to AD and WGM on a 10.8 server.

 

I'm currently in the process of planning to upgrade to 10.11 using Profile Manager and have made some progress, but I currently have an MCX preference which restricts access to certain apps on certain clients. (Mail etc).

 

I have looked at Profile Manager and it looks like I can migrate most of my MCX settings to Profile Manager either through the UI or via a mobileconfig file. The only thing I can't seem to replicate is the restrict certain apps MCX. I can tell PM to allow certain apps, but that would mean listing every app I want to use instead of just restricting the handful of ones that I don't want to use.

 

Can anyone give me some advice on how I can get my clients to behave as they currently are but by using profile manager instead?

 

Many thanks

Nick