I wanted to deny the use of MDM to everyone who wasn't admin. I was expecting to be able to set up a deny rule then allow access to it for some users but it doesn't seem to work like this. The basic principle is deny everything then allow you to create… more »