The "Can enable remote management" setting is checked for every user I add into profile manager. All the documentation I read on profile manager seems to show that this should be off by default. I need to be able to use an enrollment profile to add devic

The "Can enable remote management" setting is checked for every user I add into profile manager (I can't uncheck it). All the documentation I read on profile manager seems to show that this should be off by default. I need to be able to use an enrollment profile to add devices and do not want users to be able to enroll devices themselves. Any ideas on why I can't uncheck that box, or why it's checked by default for users in the first place? Thanks for any advice!