Ever since Apple moved from Managed Settings for Mac (MCX) to Mobile Device Management (MDM), we lost the option to "set once".
With that said, any reason for an enterprise user to ever have the kNeverRememberUserADInfo checked?
By unchecking and greying out the box using kNeverRememberUserADInfo -bool false, that'll uncheck the box and grey it out for the user, which is what we want to do.
Just curious if there's ever a reason for macOS users to be able to change that setting in a managed enterprise environment?
