Block Enrollment

[jueliang]

Dear Forum Members,

I am trying to block further enrollment to one of the OUs.

There is Restrictions under Device/Users -> General -> Enrollment. 

I have tried to change the enrollment limit down to 0, but it won't work given you already have existing devices enrolled.

Any idea what's the best way of approaching this?

Thanks.

[MatthewSwenson]

I'm not sure this is the *best* approach, but you could simply set it to the number of currently-enrolled devices...  If you have devices being unenrolled, then you will have to periodically adjust the setting.

Maybe someone else has a better idea?