In a corporate environment, a network administrator is tasked with assigning security policies to a group of endpoints that includes both Windows and macOS devices. The organization has a policy that mandates different security configurations based on the operating system type. The administrator must ensure that the policies are applied correctly to each endpoint type while also considering the potential for overlapping policies that could lead to conflicts. Given that the Windows endpoints require a more stringent policy due to higher vulnerability exposure, while the macOS devices can operate under a less strict policy, how should the administrator approach the assignment of these policies to ensure compliance and security?