We currently have Activation Lock disabled in PreStage, and users are
prevented from logging on to System Preferences with their Apple ID
(personal Apple IDs, not MAIDs). However, we have not always had this in
place and some users have enabled Find ...