...
Device Activation Options
Set Device Activation to do nothing as it will be Admin who will be activating the DevicePass token on the Admin Console
Remove the option to allow users to request the activation code and change the contact info message to something more appropriate if you do not wish the administrator to be contacted
...
Sending a Grace Period Notification is also Optional but useful. Depending on what message gateways have been set up you can apply different delivery channels.
(Please refer to the following wiki page to set up message gateways
https://wiki.deepnetsecurity.com/display/DualShield6/Message+Gateways )