So as part of our enrollment process, we change the dock using dockutil.
With our DEP machines, we also "Create an additional local administrator
account" (UID 501) However, if I log out of the account that a typical
employee would create/use (UID 50...