macOS policy still showing as associated after removing user from target groupSolved

Participant
Discussion
1 day ago Jun 23, 2026

I removed a macOS user from the user group targeted by a policy and also added the user to an exclusion group. However, the MacBook still showed the policy as applied.

I already tried running a Scan Device action, but the policy still appeared as associated via User Group. The confusing part was that the user was no longer in the targeted group, and the group itself did not show that policy assigned anymore.

Is there usually a delay before policy removal reflects on the Mac, or should the policy be removed immediately?

Replies (2)

Marked SolutionPending Review
Hexnode Expert
22 hours ago Jun 23, 2026
Marked SolutionPending Review

Hello @diane_ ,

Policy disassociation in Hexnode may not always reflect instantly on the device or in the portal status. When a user is removed from a targeted user group or added to an exclusion group, Hexnode needs to process the policy change and send the updated commands downstream to the device.

For this scenario, the correct checks are:

  1. Confirm that the user is no longer a member of the user group targeted by the policy.
  2. Confirm that the user is part of the exclusion group, if exclusions are being used.
  3. Confirm that the policy is not directly associated with the device or user through another target.
  4. Run a Scan device action to refresh the device status.
  5. Allow some time for the policy removal command to be processed and reflected on the Mac.

If the policy still shows as associated via User Group even after the group assignment has been removed, it is usually a status synchronization delay rather than the policy still being actively targeted.

Regards,
Simon Scott
Hexnode UEM

Marked SolutionPending Review
Participant
19 hours ago Jun 23, 2026
Marked SolutionPending Review

Its clear now. The policy eventually disappeared from the Mac, so it looks like it was just delayed and not a configuration issue.

Save