With this model, it doesn't seem like the enrollment complete policies kick off during DEP. I checked the logs and it seems like it checks but doesn't run any after enrollment. Turned off the Secure boot just in case but still a no go.
Is this 10.13.6 on the new models some type of special build like in the past? We are also still on JAMF 10.6.0 so wondering if there was a fix in 10.6.2.