Well, you learn something new everyday
So I would have to move them to the default policy, deploy the app, then move them back to the restricted policy? Hoping they don't notice and DL and install something else during the time they are in the default policy.
Thanks