We have enrolled a good number of macs without the Prevent user from enabling activation lock setup in our pre-stage.
We will be turning this on in the pre-stage, but for existing Jamf enrolled macs we will be using a mass action: Disable and prevent Activation Lock remote command. Is any way to verily on the mac that the command is working and user is prevent from activation locking the mac? I see in Systems information it a says activation lock is disabled but I want to confirm the user can not enable it by logging into icloud.
Looks like you should be okay as long as it is disabled; If enabled, you can always get the unlock codes from JAMF.
Some more on this from my testing: