Currently when one marked "Disable users ability to manage their devices" it is still possible to add new devices as user via with the enrollment process in "proxy"