I'm just updating all of our machines from an old 10.6 base to 10.9 and one of the things I've started pulling is a list of Profiles as an extension attribute. It all seems fine, but I am seeing one inconsistency: some machines show a "MDM profile" and some show "MDM Enrollment".

Can anyone tell me the difference?

For example, here are 2 machines: Machine 1: (imaged more recently)
WIFI: Corp EAP-TLS
MDM Profile

Machine 2 (Imaged less recently)
WIFI: Corp EAP-TLS MDM Enrollment