So--we have 'Prevent user from enabling Activation Lock' checked in our enrollment and it seems to be working since we've stopped having issues with our users "claiming" their Macs and having to contact Apple to get them removed.
But it seems like they can still turn on Find My. We just got some back and reinstalled OS and right after going through the Remote Management screens we get the Find My pop saying that XXX Apple id can track it in Find My, etc. But we can just click Continue and finish setup. It is very possible I'm blind and my Google-fu is failing but I can't find any way to 1.) Prevent this from happening in the first place and 2.) Removing the computer from Find My short of contacting Apple or asking the previous user to remove it from the web.
Anyone else experienced this and/or have a fix?
