Using MDM to enroll devices allows the system administrator to control who can or cannot enroll their devices. You might want to change the following options in the DeviceID policy.
Device Registration
If you decide that the only way a device can be enrolled is via MDM, then you need to disable the device registration option.
Device Activation
As the devices will be enrolled via MDM, you might want to automatically activate a newly registered device.
