An Endpoint Protection Mac client installed using an exported package does not see the assigned group policies until after it connects to the Manager.
Last Updated May 06, 2019
When a Mac client is installed using an exported install package containing a policy and group assignment, none of the policy or location information is applied to the client until that client connects to the Manager. The client knows the parent server, but there is no policy serial number and no policies or locations applied. This can prevent remote Mac clients from checking in when their proper location is not assigned from the policy included in the install package.
Endpoint Protection Mac client version 14.2 to 14.2 MP1
The group policy format changed within the exported client install package.