I get asked from time to time how to ensure that people are enrolling in MDM first or how to suppress the initial prompt to users if they want to „secure the devices“ as well
However, in XenMobile 9 this was controlled by a setting in the AC Configuration named require Device Manager enrollment. In XenMobile 10 it went over to Configuration -> Settings -> Server Properties and look for the key named wsapi.mdm.required.flag
This one property decides if device must be enrolled in MDM prior to MAM deployment.
If you want to enforce MDM enrollment, set this value to true