I setup a Smart Group to tell me which machines have Activation Lock enabled but I'm not sure I have it set up right or if it's working correctly. I have machines that show Activation lock enabled but then it gets removed from the group and re-added randomly. Basically, I'm trying to identify all the machines that are not DEP enabled with Activation lock so I can work with them to disable it and not use it.
