A DEP device can be assigned to a specific user, which will restrict other users from enrolling the device using Apple DEP. However, the same device can be enrolled through the ZENworks User Portal using another user’s credentials. To ensure that the assigned user enrolls using Apple DEP (not using the ZENworks User Portal), disable the Allow user to skip applying the MDM profile on the device option appearing in the Editing General and Skip Item Settings.
To assign a user:
Navigate to Devices > Discovered > Apple DEP Devices.
Select a DEP device.
On the summary page, click Edit next to the Assigned User field and specify the user to whom the device should be assigned.