Help with MacOS MDM enrollment
I'm at my wit's end trying to figure this out, any help would be appreciated! So I set up Apple Business Manager, and I factory reset and added one of our Macs in with Apple Configurator 2 on my iPhone. After it reached the desktop I see it in ABM just fine, but somehow I forgot to set up the enrollment into our MDM. Now I have gone in on our ABM dashboard and set the MDM to our ManageEngine instance and the Mac is now synced in ManageEngine.
The trouble is, I would really like to apply the new MDM to the Mac without re-wiping the machine as it caused enough tension for our employee. I would really like to avoid that process. I heard of the "sudo profiles renew -type enrollment" command, but if I use that does that actually force the MDM just like it would if I did a factory reset? Or will the user be able to remove it? Is my only option to reset the Mac again? The Mac is in ABM right now with the MDM newly assigned.
On a side note, the "Activation Lock" field is "Off" with a red warning sign. Does this mean that the Mac is still tied to the employee's personal Apple ID? How do I make it so the organization can control the device lock?
Thanks!